NEAS[.]14636ebf65f8d3894dd2b3467468a2a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14636ebf65f8d3894dd2b3467468a2a0.exe
Size

92KB
MD5

14636ebf65f8d3894dd2b3467468a2a0
SHA1

796a8f0d0640ca3c1f6e0a64d2f51139db844eca
SHA256

e85888fbb92879b290855f140a862b2fcf2270110d94fa25e1bca9b66af5c007
SHA512

6f5767e4dcf9b2e2388193756f165d8f661b3502113e1c2b0c50a6eacd9651ef64e398db37f77b31139c2f6ca6fc63ad3a3ad7ce7b28ba5181ebe86cb84a4f9e
SSDEEP

1536:rXl40jYU/q9Vg4fQV6czNczNN8v9kZ83YacIyP/69QAq0Gb8/Z5H83oKz:uKHCVR4hNczNiv9cKYBbWq0GQP0oKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14636ebf65f8d3894dd2b3467468a2a0.exe

Files

NEAS.14636ebf65f8d3894dd2b3467468a2a0.exe
.exe windows:4 windows x86

6cc60ed7e6c2f6d44b09fd13a56cfaaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
SetFilePointer
GetConsoleInputExeNameA
lstrcmpW
CreateHardLinkA
EnumSystemGeoID
GetStartupInfoW
InterlockedFlushSList
ReadFileEx
SetThreadPriority
BackupSeek
FileTimeToLocalFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE