NEAS[.]6085f6329d4a254d9bf69f806c749eb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6085f6329d4a254d9bf69f806c749eb0.exe
Size

119KB
MD5

6085f6329d4a254d9bf69f806c749eb0
SHA1

6ffb5e880501bcc6178a8430f4c1d023b357ac2f
SHA256

d1ac9565fa30dca43e2d57f0ea34a4428fbc7bf15517e57610c64c87a3ba1c2f
SHA512

66e72c16d3d11e551d15bdd86d103255b72a8efbb4b0ef3ac6efe7bdc127d22bb46f8671cbfdeed04a9b8118f42e404f4a33fb63a0ee0ae99337e782bcf7f69a
SSDEEP

3072:TmIq9+x7AXIYS9EYBrZxKwlTPUgPVzLjqb:QSYS2YBr7KMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6085f6329d4a254d9bf69f806c749eb0.exe

Files

NEAS.6085f6329d4a254d9bf69f806c749eb0.exe
.exe windows:4 windows x86

cb9770aba75196db6434ab4d19d7511a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
CopyFileTransactedA
CancelIo
IsCalendarLeapDay
BasepReleaseSxsCreateProcessUtilityStruct
SetHandleCount
GetConsoleAliasesLengthA
BaseVerifyUnicodeString
BasepPostSuccessAppXExtension

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE