NEAS[.]17691f584d31517a621b94985c426bd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.17691f584d31517a621b94985c426bd0.exe
Size

91KB
MD5

17691f584d31517a621b94985c426bd0
SHA1

683abc55e48fd1cb172455d7755570f2c79463d2
SHA256

f8737e4e2c83655758e7b497dd4dcf79d17ebb3d8238e6e73f96a63f6e608881
SHA512

b306755a2e332d9d4383c039c898f45e74f218ca5c98ca354bf3354d6c49a9ffbe6a3cfbc2a292e5d40c89b548ee879d1e82282c2db7b9a26d684337aeef5253
SSDEEP

1536:l09XXKgLeqmWPBk6UNjSea69Cg+lxqMhvIVZ3KjGZgiJjd7Mh17:K9HtLAKB+61xqMKCjCgiv7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.17691f584d31517a621b94985c426bd0.exe

Files

NEAS.17691f584d31517a621b94985c426bd0.exe
.exe windows:4 windows x86

b0cff8a57ef7320b4d45606595f7685f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorInfo
GetPrivateProfileSectionW
EnumSystemCodePagesW
_hread
GetConsoleAliasesA
GetConsoleCommandHistoryLengthA
FindActCtxSectionGuid
InterlockedDecrement
SetComputerNameW
GetBinaryType

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE