NEAS[.]af6e84de7d655d8d5885a573ec75c950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af6e84de7d655d8d5885a573ec75c950.exe
Size

119KB
MD5

af6e84de7d655d8d5885a573ec75c950
SHA1

be06da9eb34e8acfcda91fe65a7b2e92a11c0bf7
SHA256

d632f81f285a2549112be839cf3b1645da82eb2ea4c88658a235af57bffab8fa
SHA512

3b37ddd074054965a842b717cae25a40ac95d6e0ae0384673a73393f2e0ecf5478160ee2e18955853cb0e0a7b06c22694618edbb7dd7e070a3531f4787d1b15d
SSDEEP

3072:9v3lG3DKLLL5yR1AvfwhChTsCYcswVq7NvNp0ewUOGiM1Hq:WDKHL5yRG3ApDpwoBNpd71K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af6e84de7d655d8d5885a573ec75c950.exe

Files

NEAS.af6e84de7d655d8d5885a573ec75c950.exe
.exe windows:4 windows x86

e9717ad8574da510934d9a59d725da51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hread
WriteConsoleOutputAttribute
AddResourceAttributeAce
GetPriorityClass
GetFirmwareEnvironmentVariableExA
WerSetFlagsWorker
K32GetWsChangesEx
GetCurrentThreadStackLimits
GetPrivateProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE