NEAS[.]6c10ef7ce64fccbb76dfdc24d8d67e20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6c10ef7ce64fccbb76dfdc24d8d67e20.exe
Size

66KB
MD5

6c10ef7ce64fccbb76dfdc24d8d67e20
SHA1

17fdc45410b99de7ffa196e775cb157ed27edbaa
SHA256

8acbeef499f4ec281e49de5da7e9f6a9a786e6b5b5b737a3693e50faab2e4eda
SHA512

16ea2683efbd684867833c36a0dca1e8e484e31a82aa83e881ad52fc5b4bb62ffbe4ff16f971d259737dee36708e4b10366b1c52178ca8084eabd49aea737112
SSDEEP

1536:MnmR2bjMqdvA7mmaYAHvosyVGyA7zBVXZfjsqxBweBdWSRVoeRiTYD:MmRJmBHvovVGyA7zLXZsM2avR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6c10ef7ce64fccbb76dfdc24d8d67e20.exe

Files

NEAS.6c10ef7ce64fccbb76dfdc24d8d67e20.exe
.exe windows:4 windows x86

c67c6ed86d6dea8800cf5831031abceb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BasepInitAppCompatData
SetThreadpoolTimerEx
WriteConsoleOutputCharacterA
_lopen
WerUnregisterAppLocalDump
DeleteFileTransactedW
K32GetDeviceDriverFileNameW
FindVolumeMountPointClose
DebugSetProcessKillOnExit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE