NEAS[.]600a2a6072c284abdeaf292ed252e360[.]exe | Triage

Sharing

General

Target

NEAS.600a2a6072c284abdeaf292ed252e360.exe
Size

63KB
MD5

600a2a6072c284abdeaf292ed252e360
SHA1

3b4ac1d082eec28cfec5a39ae035fb98e5122a38
SHA256

58557eec2febb088a7daaae22a0bc11e67c24d8999448fbddf27ac4c44305dfa
SHA512

1b82331be186136a003ca926743397d285ccdb287900fd93f1729e627d7644b5b39ecc6fc5462388caf2874da08828ef98d9f9c0e10264e2e9486c86df424958
SSDEEP

1536:lqeNAtgUs2Eaf9QjxeOa0mC7gM/G6OPG2BAbf6Mvq:Ytg0E89VR0mCMcGbZBAbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.600a2a6072c284abdeaf292ed252e360.exe

Files

NEAS.600a2a6072c284abdeaf292ed252e360.exe
.exe windows:4 windows x86

76671ae33018a77650451deff8308fd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputA
GlobalMemoryStatusEx
GetProfileSectionA
GetLinguistLangSize
_hwrite
OpenJobObjectA
SetLastConsoleEventActive
GetCommProperties
DeleteCriticalSection
FreeUserPhysicalPages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE