NEAS[.]464620304b6f1afbc44f8ef8eedb6d20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.464620304b6f1afbc44f8ef8eedb6d20.exe
Size

119KB
MD5

464620304b6f1afbc44f8ef8eedb6d20
SHA1

ed1dd28210564678b39294ab8940023001de25fc
SHA256

2035368d22b36bcc8638b5637642fa69f393175c79df99e5fc9d6e668e34491e
SHA512

3882e23289044de84e46811366fef52a52235ac7b1b0975110ebc19fa78abb389c637ebd17711bdc534291a412af68416b8a18b5deb823f672b47e7b350875a2
SSDEEP

1536:BONCSVcyTSTCZNfmLaCT/eCHi/CuHOStuIkiFGVeokqoyhWAMhA+QJB8Rfk/2KnW:ECfGPfdoeOuCFSEIGVkyUG+QJznp9wnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.464620304b6f1afbc44f8ef8eedb6d20.exe

Files

NEAS.464620304b6f1afbc44f8ef8eedb6d20.exe
.exe windows:4 windows x86

42eabfd4b36daef5c4c52a38e578825a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Wow64Transition
CommConfigDialogW
GetQueuedCompletionStatusEx
WriteConsoleOutputCharacterA
GetFileSizeEx
LocalFileTimeToFileTime
SetThreadpoolTimerEx
_lwrite
GetConsoleOriginalTitleW
InitializeConditionVariable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE