NEAS[.]574a60cb9524ffc464ecbae841320d30[.]exe | Triage

Sharing

General

Target

NEAS.574a60cb9524ffc464ecbae841320d30.exe
Size

119KB
MD5

574a60cb9524ffc464ecbae841320d30
SHA1

3d85578faf007d282b16d45cd335b22c13643671
SHA256

b13b34a41787549658603b3b5cb55256f8e594d5712c91c9087b5b8e14e6df66
SHA512

1815ac66eeecbdab33bd2a28bcb4ce57054917453f30830b385f2b247ff0bf6d7734053b05b2a174009e514d487d8d2bb2bf41f4944c655f3a1eac686900f668
SSDEEP

3072:tPcagIyW0WLS3qcO/RajZdt06wLz2/vSyhJUbO7oCdYeYGTmwl7z:dcv9WLKkad07nEvVhJFUTeVTNNz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.574a60cb9524ffc464ecbae841320d30.exe

Files

NEAS.574a60cb9524ffc464ecbae841320d30.exe
.exe windows:4 windows x86

260c523bd85e5855e67edbb49d0921f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeAttribute
GetSystemDirectoryW
VerLanguageNameA
RegisterConsoleOS2
WritePrivateProfileStructW
WakeConditionVariable
GetGeoInfoA
DeleteFileA
SetEventWhenCallbackReturns
WaitForThreadpoolIoCallbacks

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE