NEAS[.]1467769610034b9945288af28977d870[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1467769610034b9945288af28977d870.exe
Size

62KB
MD5

1467769610034b9945288af28977d870
SHA1

d53aab1c783113b4dc42b3c77d8afd6c91614c52
SHA256

c29efc762cb7f96ddfdd597cc8ea102a505b4a330aeabaa9042a3cc0b1350496
SHA512

e9dff1117daed49dc4500d90c03b3a4ea102e2b83d6fd7e966101636e1bc6e8a0ca08547fbaec4fcb58ee13fda90e457b8576458141138ea3358dcf7fd889c54
SSDEEP

1536:Sg7y42LtDN+HSRD7UwP5AOg+3RWnRrTCrTr9KO7q7C9y:S+2DN+Y9hAOgQsRrTCrNX7q7wy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1467769610034b9945288af28977d870.exe

Files

NEAS.1467769610034b9945288af28977d870.exe
.exe windows:4 windows x86

8867ffa1612b9fd58ab16112cd33072a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreateTagsW
AllocConsole
FindNextVolumeMountPointA
WriteTapemark
EnumResourceLanguagesW
SetVolumeMountPointW
InterlockedPushEntrySList
Module32NextW
BackupRead
UTUnRegister
GetStdHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE