NEAS[.]14f252224748fc54983eca8119b17450[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14f252224748fc54983eca8119b17450.exe
Size

66KB
MD5

14f252224748fc54983eca8119b17450
SHA1

1f472b46add2fdfb7f51e31b662c9346d1fd194f
SHA256

4fc21f0aaaad3a0565c9f12a0d1836812b7ce548844e49b630981a6b2a178e6e
SHA512

e3ec9fad1815a9cef2bd19247ec06fd186a98156f348a6964dce80e07e7b4dbfd3fe4a661b92b94eadb9678a506acf80e67339275688acda31dffb44d3032c41
SSDEEP

1536:jbN8+cJ6m/92Mc89pej91n9LCRFJe0LXgkDWK:X2CmV7cuC1nBoi6wkDWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14f252224748fc54983eca8119b17450.exe

Files

NEAS.14f252224748fc54983eca8119b17450.exe
.exe windows:4 windows x86

1bad7e6c596c26a5118eef2c917ca0e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidNLSVersion
GetConsoleCursorInfo
TlsFree
CreateSymbolicLinkTransactedW
GetConsoleTitleA
GetDefaultCommConfigA
ConvertSystemTimeToCalDateTime
ReadConsoleInputA
HeapQueryInformation
K32GetModuleFileNameExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE