NEAS[.]630ba5db96a713d3310bfd7252a1c640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.630ba5db96a713d3310bfd7252a1c640.exe
Size

119KB
MD5

630ba5db96a713d3310bfd7252a1c640
SHA1

05bb377827ab8dee324d7738cddd238e3feeba3d
SHA256

3db3a56fbd78aade48240081c36ae103f9cbc4ae4c69a6f4fda95b8f34822fe2
SHA512

944273111cfa88305803ef18ec11cfb5ea2480285196b2e408b814975886b444b22469457264b63fd3511cb1fac767c8031be8b5c8ce8660ef874f5c531a4123
SSDEEP

1536:mpi8SDMB/4BW+vOw79OX+wbG52r1CrvIVMzSqQfrC6nJ8nWX4z8KLoQUOt6n/V:CIMhmW1k9Ouwbm2+vI+zJM+9GQ5MnN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.630ba5db96a713d3310bfd7252a1c640.exe

Files

NEAS.630ba5db96a713d3310bfd7252a1c640.exe
.exe windows:4 windows x86

51a32125c23c054cb21746ea4865dd49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructW
InterlockedExchangeAdd
GetCommState
ReleaseSemaphoreWhenCallbackReturns
SetEnvironmentVariableW
OpenWaitableTimerA
EnumTimeFormatsEx
WerGetFlags
GetConsoleOriginalTitleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE