NEAS[.]5ecbec65581671dc2b2d82ce65099dd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ecbec65581671dc2b2d82ce65099dd0.exe
Size

62KB
MD5

5ecbec65581671dc2b2d82ce65099dd0
SHA1

3cd3b51954d5ce3e66d0678a170102651724bfb4
SHA256

712683c1abdd13f490ba480fe3860b3a669406ec9d5bcbe74a3431402abbab50
SHA512

848c1063b09f406966e94f143d3dbd38e28cc7afe203c507ae54b133619302ab1be5ddf37a3c6dddd502b7ec4d1cb2e99b352d2193fff8d7c58264c1a788dafa
SSDEEP

1536:hkdKUGSkKWf+Zu4uFTuFkhtQXtKgzd8JjTQQS:hkdXG13+Zu4uQFotQXtKm8JoQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ecbec65581671dc2b2d82ce65099dd0.exe

Files

NEAS.5ecbec65581671dc2b2d82ce65099dd0.exe
.exe windows:4 windows x86

5b94e244ae60f8aaffe0efaa83de1491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekConsoleInputA
CreateConsoleScreenBuffer
ReleaseActCtx
Process32NextW
ReadConsoleOutputA
InitializeCriticalSection
SetEnvironmentVariableW
lstrlenW
GetConsoleKeyboardLayoutNameW
GetFullPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE