NEAS[.]253e55ebc82d891820739dad3c2b1c30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.253e55ebc82d891820739dad3c2b1c30.exe
Size

23KB
MD5

253e55ebc82d891820739dad3c2b1c30
SHA1

8a53829dfe01c06ae5d0b41020dc8beada7ffc66
SHA256

932ee59e7c7932bff51300878f4ef68b4d5dbc4d2c61fd73b48423bb6b65d8a4
SHA512

70dc29237a29ec9eecc8fcc0dbf57c7eafeaa2024d01c3b1c62bd51373824b93163e8933ecfcc93948686bfcab6d8385c64a3edab37b249b3b2bd5b2df0a035e
SSDEEP

384:13arRb6ORkDmZjDWh+dV9PGdv7VkyfOh2LN8trirLv:13UVRWm5WeV9wTeOGrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.253e55ebc82d891820739dad3c2b1c30.exe

Files

NEAS.253e55ebc82d891820739dad3c2b1c30.exe
.exe windows:6 windows x86

cd8e6a768bcbf7d8f3deeb5e51264eb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile

user32

MessageBoxA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ