NEAS[.]60d1ad2c66258febed87593187da4af0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.60d1ad2c66258febed87593187da4af0.exe
Size

66KB
MD5

60d1ad2c66258febed87593187da4af0
SHA1

23df0c1435bacac15528d20a87ec8d18b9a2167b
SHA256

4f2cfb8ff23c1758ddcac365501b10c94ca97d4b26454e261abf4fb5b720aa36
SHA512

e6fefcc403683dabf5cb14c2d348fb04d2d99f2a543ec12b13ec0516885e5f008e3de67359c8ab1a8b3882a4f1e5e9cfe2196728901e7efd7d01ebf55f817066
SSDEEP

1536:wvi3CWUugor48rpitihDsJ2ZaK5Du37Egq0ZF4Re4hKjad69tO:wqySgD8rpAMBaT7EjOrjad6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.60d1ad2c66258febed87593187da4af0.exe

Files

NEAS.60d1ad2c66258febed87593187da4af0.exe
.exe windows:4 windows x86

7986cbb25817e9f60717b1f243bcf81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckForReadOnlyResourceFilter
FatalAppExitW
GetDiskFreeSpaceA
AddResourceAttributeAce
CreateFile2
GetFileMUIPath
EnumResourceTypesW
GetSystemAppDataKey
RegGetValueA
IsWow64Process2
GetModuleHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE