NEAS[.]68160de7dc78ca77d33b45400f632ad0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68160de7dc78ca77d33b45400f632ad0.exe
Size

66KB
MD5

68160de7dc78ca77d33b45400f632ad0
SHA1

7bd6e0b8eb131c2b35990f46e3d3f661a43d15e9
SHA256

438a104eb87042997ebd23de32c60c9833ddc623156bcc0b249f6a7ffc32c56b
SHA512

f141bb60a26b71ba29ebed06b21aeecd493ed4140ca47efd4062656f2ba956531f86988ebf55039d5ff9830f3e98c8a84377b638328b0a33cc817636a7971f35
SSDEEP

1536:Cxm3lJ4YPVXSFLCnPj0t3AoAiIhBNaPvRsqQiGO9p:NlyYPRuAPIpLlKyPvRBGYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68160de7dc78ca77d33b45400f632ad0.exe

Files

NEAS.68160de7dc78ca77d33b45400f632ad0.exe
.exe windows:4 windows x86

ac19cd0d6aa0bf8507046c9e9188f712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileShortNameW
LoadStringBaseW
GetTimeZoneInformationForYear
VirtualFreeEx
GetCurrentThreadStackLimits
GetExpandedNameA
GetLongPathNameTransactedW
GetStringTypeW
InterlockedExchange
WriteConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE