NEAS[.]691e54d60b7e452f4e662d124a29a4b0[.]exe | Triage

Sharing

General

Target

NEAS.691e54d60b7e452f4e662d124a29a4b0.exe
Size

63KB
MD5

691e54d60b7e452f4e662d124a29a4b0
SHA1

388e98dd9d708ee36a5e2ecdaf8e888e511e8171
SHA256

293c44ebad3e1ffb6dfaeec04e3689b50fadfffcc07c62e14ef49a8d7e3f339e
SHA512

a58c7c3ec0854db2bfdfe77731301304fe8f4cb3461f4f1b7d8b847894a5fc4d7c4f4f3cad114570786939b4d163b48a71596c6c76a9900677398ce57dfe4cf9
SSDEEP

768:IR5ZJwqCNLrzbm+MO/RHDhK77C5eY2Ez4dWuPGxv2TDntlCySErpNil9+rvcfQiG:USkaK7PLXPGhCTSErpsjfQct23AB3ED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.691e54d60b7e452f4e662d124a29a4b0.exe

Files

NEAS.691e54d60b7e452f4e662d124a29a4b0.exe
.exe windows:4 windows x86

23b0b5eb36e676a27077ec30feb4ab46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
GetCurrentThreadId
GetConsoleNlsMode
QueryMemoryResourceNotification
ReadConsoleA
Module32FirstW
GetTempPathW
FindFirstFileW
GetConsoleHardwareState
LocalHandle
QueryDosDeviceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE