NEAS[.]6c17fc124625231508dad74659edf0b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6c17fc124625231508dad74659edf0b0.exe
Size

66KB
MD5

6c17fc124625231508dad74659edf0b0
SHA1

a277ebf6d6c5daee39aded4da339482b328ceca6
SHA256

eec7b8ce89508cef2e432939143679121eadb6f2068da1209322f3b8c34e123d
SHA512

a0591d9be7d4e8cd8d7fe1c0b79b4da4caf52ccac9f5d3e1e882e00d159391c82dce802509b0c62e318d78da827549868255f4a83473d8757cd6c6a20fc95423
SSDEEP

1536:u9TYYJQ1pq/qlKTQxg2Sf2tlEO/68SaufMyWn3kpqybeV1hnl0jTg:uOYqlK52tlEOi8WUv3POchijTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6c17fc124625231508dad74659edf0b0.exe

Files

NEAS.6c17fc124625231508dad74659edf0b0.exe
.exe windows:4 windows x86

bb320b4b8d62bf2f7ffe4e90ba744d06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsThreadAFiber
InterlockedExchangeAdd
GetUserPreferredUILanguages
FlsFree
GetConsoleOriginalTitleA
GetConsoleSelectionInfo
SetFileTime
WritePrivateProfileSectionW
CompareStringOrdinal
GlobalFix

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE