NEAS[.]6f2e3105b7ce2a14d5b0475a647d6a30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6f2e3105b7ce2a14d5b0475a647d6a30.exe
Size

66KB
MD5

6f2e3105b7ce2a14d5b0475a647d6a30
SHA1

031726b2a0f33d619b62b09c7e3ff2b7244d358e
SHA256

c93c1906deee75f35737a18807e4d7218a8c0071bc812ca034921d38ed0b9ceb
SHA512

d3b5ec6121d0b5d83db607242af3b004b74ec7f2b205aed2fa873311b94b85538560c7f169242daeb15c5e5734ffa8118e5ec47cf98ae5d9bda3be8b67b65dfe
SSDEEP

1536:I0eHbPtKExKKkcN+5D56DpNGzLqnQpm7HyjSbX891O7vBs5LQa:IZDtKEYwM5F6NjQpm7SjSbGAYUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6f2e3105b7ce2a14d5b0475a647d6a30.exe

Files

NEAS.6f2e3105b7ce2a14d5b0475a647d6a30.exe
.exe windows:4 windows x86

fa16682a71c0abb7eaf08dc5fd32e512

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
RegLoadKeyA
SetThreadpoolTimer
CheckForReadOnlyResource
GetProfileIntA
LCMapStringEx
CreateSymbolicLinkW
GetCurrentActCtx
SetConsoleKeyShortcuts
BaseCheckAppcompatCacheWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE