NEAS[.]2604c7c98e56001acd53854630bdea20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2604c7c98e56001acd53854630bdea20.exe
Size

119KB
MD5

2604c7c98e56001acd53854630bdea20
SHA1

81e9bb054600dab5aa0a07d636e906db86310e86
SHA256

9d814d790e8a62792b4661685af25bb2db51eeb60aae115e041e8a7ddb935f34
SHA512

ae4ffc60f3f10d471613d9d13b4aaf7c920f000ea46e941b1cc06b435023c219cc86c15a7cb4242fd603a377b28dedc20e4417dc73cd653587060499b17fddc2
SSDEEP

3072:WJitTnaCkFhggTn/bKb9He8d7pKXcm5lYLd:WcKhFn/+b9+Y7pKXh5+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2604c7c98e56001acd53854630bdea20.exe

Files

NEAS.2604c7c98e56001acd53854630bdea20.exe
.exe windows:4 windows x86

f18c46d739ca4ed094b32e4660da32df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
AcquireSRWLockShared
GetCurrentPackageFullName
SetFileInformationByHandle
GetLogicalProcessorInformationEx
ConvertThreadToFiber
K32GetModuleFileNameExA
SetConsoleNlsMode
GetTickCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE