NEAS[.]66559de6e8ffc1f6a1e43b812927b240[.]exe | Triage

Sharing

General

Target

NEAS.66559de6e8ffc1f6a1e43b812927b240.exe
Size

66KB
MD5

66559de6e8ffc1f6a1e43b812927b240
SHA1

e64dee042355298a97f9ca69b502729046eebebf
SHA256

c16b77535a76aaf07117496723ba44ca5eb8860dd0442834cfebf647ab01674a
SHA512

a7c23774e05b545132ba5ab1059bf2aaecc2288b294f6ccade45fbd0b8444663cbbce0083c57a036f84dc77783ef79da77af7249bc6cabef1d9bf91e02f19f4f
SSDEEP

1536:gimack/VeBvmJm7N3SWy2z/70NMWh/1nkEkLMPgjMIch5FI:gdA/VeBvmS3SWJ70NMWrgLSY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.66559de6e8ffc1f6a1e43b812927b240.exe

Files

NEAS.66559de6e8ffc1f6a1e43b812927b240.exe
.exe windows:4 windows x86

75a21e419d5fe2a75717c33ccf26c807

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFirmwareEnvironmentVariableW
CreateMutexW
GlobalAlloc
GetCompressedFileSizeA
RegisterConsoleOS2
InterlockedCompareExchange
QueryDosDeviceA
SetLocalPrimaryComputerNameA
SetConsoleMenuClose
GetUserDefaultLCID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE