NEAS[.]1ce868016c0b4db712eacf7e5aa1eee0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1ce868016c0b4db712eacf7e5aa1eee0.exe
Size

119KB
MD5

1ce868016c0b4db712eacf7e5aa1eee0
SHA1

d4c56a7001ab721c3679dfe5f768c3b10147f57f
SHA256

617e1ffa3e1f88348f77da42e35152e64deb37e54a1c65dd54861a88987a5531
SHA512

6ad9a8fd5e0353ecfbcbbbf56de9be4245269f13f43a374a7f9243187465c4023040c9d6cece560dfacf60428c98745d9106a52eaaa7f5fffedec1c5d19ff35c
SSDEEP

3072:T2qsyud0Zjgqv9WfXNavmvvgaHAsNa9OF2PVIpkmO/:inR4jgrf9av6Jg7OFEI63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1ce868016c0b4db712eacf7e5aa1eee0.exe

Files

NEAS.1ce868016c0b4db712eacf7e5aa1eee0.exe
.exe windows:4 windows x86

61f37d33698f215207aeb8e9ec1cb083

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegSaveKeyExA
GetConsoleMode
CreateThreadpoolIo
ReadConsoleInputExW
AddRefActCtxWorker
K32EnumProcesses
BaseCheckAppcompatCache
GetSystemTime
GetTimeFormatWWorker
GetDevicePowerState
SetConsoleHistoryInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE