NEAS[.]75854ff11c101aaa2f2c23d50d539640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.75854ff11c101aaa2f2c23d50d539640.exe
Size

66KB
MD5

75854ff11c101aaa2f2c23d50d539640
SHA1

efa1fea7cbd74c4734540f2f598050ed94aff84b
SHA256

ccf227735a5b1bf821dfae746cb6a31168565fec3a53d4c0a2b2b17dd6d0f9b6
SHA512

306e2b5c06e63f4e32ff115c5f7572791b3651125dbcbbf6f595dbc3de5bf534cf8ecf0c11b580593acc6cc6f7747b1c36b540c0e98ed08b052f1a4b7c12830a
SSDEEP

1536:aVQXZHyDvYpH6IXosU/wWKu5sStVjh0DFfMNo67tX:gQsDOxXqFKuftVjhMFfSJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.75854ff11c101aaa2f2c23d50d539640.exe

Files

NEAS.75854ff11c101aaa2f2c23d50d539640.exe
.exe windows:4 windows x86

c971bf487daaf938cab38986883e7e9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckNameLegalDOS8Dot3W
ScrollConsoleScreenBufferA
K32GetDeviceDriverFileNameW
ReadDirectoryChangesExW
BasepReleaseSxsCreateProcessUtilityStruct
ReadConsoleOutputA
QueueUserWorkItem
GetLogicalDriveStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE