NEAS[.]fb3350452ecd5a8a30c681dfb69f7240[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb3350452ecd5a8a30c681dfb69f7240.exe
Size

62KB
MD5

fb3350452ecd5a8a30c681dfb69f7240
SHA1

f862f060f61efa9867c2f40966a0b1d5febfb0bc
SHA256

23d7285e2e06dcf261cb871eea9e435ab9d7b31bae2b36d603ff6781d8640db6
SHA512

4f5dba121f09d83a00c9f7ef4680b3ccfc4e188d1c41c9a98d343cb4130594df83c11d717ed976acd69a73eb88d696f3bf40737af1d9e751990157b2f6c2e494
SSDEEP

1536:GrQDgY0QMOEjsre1vR6NU1bP0KZMMceAABJ0EOBvgP9kaeetRycBGkS:GVQ1EjsS9R6alZMTe/J86beet8s6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb3350452ecd5a8a30c681dfb69f7240.exe

Files

NEAS.fb3350452ecd5a8a30c681dfb69f7240.exe
.exe windows:4 windows x86

c70d8c6aea52e9cc1cbc2a19aac4f0de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryW
BuildCommDCBAndTimeoutsA
OpenFileMappingA
GetConsoleHardwareState
EnterCriticalSection
OpenMutexA
DeleteTimerQueueTimer
GetTempPathW
FindVolumeClose
FindResourceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE