NEAS[.]62c03c2afa57f2542903f1d861f58790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.62c03c2afa57f2542903f1d861f58790.exe
Size

119KB
MD5

62c03c2afa57f2542903f1d861f58790
SHA1

b6c43ce49ea9c01d216d5a77fa520bf40630c280
SHA256

c2c68c6bf485b4074e38e63339a5f75b52d3f5cc9427bb93096e2ab7a723bd1d
SHA512

22cc7c262fd7bfc5169d1cd4bf008ea7f196aff3efafba83e4fb6e1e7650d97b36772edd101b335843518fb36bee86669e1523cf0da85e6c7f9203ab0f7bfa30
SSDEEP

1536:SLgQlUuqWbDxzZNVqLeN4lGSvqefDdF0Dq8nzwTn1iqYXIJ8xmVdCBTOOC9Ukjwt:45GmDxVfk9SeLd62Uwpi06xUUkSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.62c03c2afa57f2542903f1d861f58790.exe

Files

NEAS.62c03c2afa57f2542903f1d861f58790.exe
.exe windows:4 windows x86

ef8171d43b3818a754898d1018ddb34d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
GetCPInfoExW
GetProfileStringA
GetSystemDefaultLangID
CreateActCtxW
FindNextFileA
GetConsoleTitleW
FlushInstructionCache
FindAtomW
BaseFreeAppCompatDataForProcessWorker
RaiseInvalid16BitExeError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE