NEAS[.]6dc5a948887cc9883590f1d321131b30[.]exe | Triage

Sharing

General

Target

NEAS.6dc5a948887cc9883590f1d321131b30.exe
Size

119KB
MD5

6dc5a948887cc9883590f1d321131b30
SHA1

26b8a1bddee05ca7c0ef2e537fa595d5e79c9529
SHA256

3cd56f83d6893a7819ee4d48be2dff2d53449295b0d6e59136fd4d5ad65c390a
SHA512

ca6e149a6ef24ba79458a93d3c5f9a436717c3b0129f2ef9bbfdba25eefee60d9a4cd01ea08f3cc34fb52cf4ee1ddeb4fb456a4e8d34cb58b76243b0cf917c15
SSDEEP

3072:WSlFlKVFsmZZsNTMzK10ta2KYUivtKO5eG38h8iY0CxbS:vPnmZuNTwVtoYUivY4eYQfux+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6dc5a948887cc9883590f1d321131b30.exe

Files

NEAS.6dc5a948887cc9883590f1d321131b30.exe
.exe windows:4 windows x86

d4860a4425703b821519496a496895a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessMitigationPolicy
WaitNamedPipeA
GetLogicalDriveStringsW
timeBeginPeriod
VerifyVersionInfoW
lstrcat
GetCalendarInfoEx
WriteProfileSectionW
GetFileMUIPath
WerGetFlags
CallbackMayRunLong

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE