NEAS[.]00ecc721511ab68c60c50eba6fc485a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00ecc721511ab68c60c50eba6fc485a0.exe
Size

63KB
MD5

00ecc721511ab68c60c50eba6fc485a0
SHA1

2167860b1bdf45879e067f9e5e4ef679c3a6a90d
SHA256

ae14a476cdfe6ed229d417110c01c05a2bf09f9d37d83673898a8760b2dd2ac3
SHA512

3cfa36ef487291bbae92f9adbcd12a8891f35a130205853c79f89c13d7c37a88e4bbd7217d15668549af1dbf7e6c7aadc281bfcd75cfc9db95cdbe828d75ba71
SSDEEP

1536:zhq+VepJssvGmRKVntu6N57tg89xi1ANZAJmMNKwx51WATU:F3ApJZGmRItP55l9k1AQ74wx54AA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00ecc721511ab68c60c50eba6fc485a0.exe

Files

NEAS.00ecc721511ab68c60c50eba6fc485a0.exe
.exe windows:4 windows x86

66d40b465531214281853c484d2e296e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
GetConsoleScreenBufferInfo
EnumCalendarInfoExW
GetLargestConsoleWindowSize
GetConsoleAliasesW
RegisterWaitForInputIdle
WTSGetActiveConsoleSessionId
GetFileAttributesExA
TlsGetValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE