NEAS[.]3c46f6e0c6378273369a3653abe4fda0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3c46f6e0c6378273369a3653abe4fda0.exe
Size

66KB
MD5

3c46f6e0c6378273369a3653abe4fda0
SHA1

847b4875c4ada20265ecfff7a5cf3a4c3afd5282
SHA256

82b6df52aaf263bd789a608190ea43f811e4f48cd3d6a30d858efd61c02e07d7
SHA512

25e8758b65c3969eb14c9213282b79ca0e2bd5f994a84560bc47a34494c784495d5809b4ad6ffe32f4896ce62593959f4acfc81bedee133e425c9ddc98c0e326
SSDEEP

1536:OxKWIEr6jkBUgwzw6uM9gTdR7nM92bXB+qX:OMpK6jkSPzHutMgVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3c46f6e0c6378273369a3653abe4fda0.exe

Files

NEAS.3c46f6e0c6378273369a3653abe4fda0.exe
.exe windows:4 windows x86

61b72f4b8913eac2350412797360a32e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseThreadpoolWait
GetPackagePathByFullName
FindNextVolumeW
GetConsoleTitleA
BaseFormatObjectAttributes
EnumerateLocalComputerNamesA
TlsAlloc
SetThreadPriorityBoost
K32EnumPageFilesW
ReadConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE