NEAS[.]6e4c60fb7de1a66fdb2b0a78652ddd70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6e4c60fb7de1a66fdb2b0a78652ddd70.exe
Size

119KB
MD5

6e4c60fb7de1a66fdb2b0a78652ddd70
SHA1

3612201624b2ca46af8c0ce98b8b8b03afee6a1e
SHA256

940bf3ca6bc20ce52062e925f857344bfbdfcdb07eeb5cc91f570eff53985547
SHA512

e6a05c2aac1b3261705db2dc56b5b5670bbc18b09710939ca1a3a608b016d80a0d8da3818229f2c638e9a7cb1bc74ac36542cc1916585f1c17609819eb23b33e
SSDEEP

3072:5RLvpFhj63ibfeJ0Ab5ou6HPiJqMocFC49cX219c:5VpoibVAN7YMIg19c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e4c60fb7de1a66fdb2b0a78652ddd70.exe

Files

NEAS.6e4c60fb7de1a66fdb2b0a78652ddd70.exe
.exe windows:4 windows x86

11e09bf41def226e40a28988d484666e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PowerSetRequest
FileTimeToLocalFileTime
GetCalendarWeekNumber
CommConfigDialogA
IsValidLanguageGroup
GetUILanguageInfo
GetTapePosition
WakeAllConditionVariable
CloseThreadpoolWait
GetDateFormatEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE