NEAS[.]4c13d4e15c31dfac70a803521e213060[.]exe | Triage

Sharing

General

Target

NEAS.4c13d4e15c31dfac70a803521e213060.exe
Size

23KB
MD5

4c13d4e15c31dfac70a803521e213060
SHA1

4bd06f36f1662e5d88b6792d99811b54bc31263d
SHA256

6c388636176b5dda690abb8611e8f053bf9c7b9a13e95a5aadb1af0588806aa3
SHA512

86ef715214f2b3e84b448a0bf978ab771214f6620e3afc60c0b503cc92f0a5fd9ec3319d7e307671d204413f6641845c9ba3d8cc65500081d05696703ac4ad7c
SSDEEP

192:NU3ifH+qiMigDTZJ/WhNPGPN7OSmjZNwquj2rirLue7:NUUezgDTX+LP2N76jZN7trirLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c13d4e15c31dfac70a803521e213060.exe

Files

NEAS.4c13d4e15c31dfac70a803521e213060.exe
.exe windows:6 windows x86

cd8e6a768bcbf7d8f3deeb5e51264eb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
CreateFileA
FormatMessageA
FlushConsoleInputBuffer
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetLastError
GetLocalTime
GetStdHandle
GetSystemTime
LocalFree
PeekConsoleInputA
ReadConsoleA
ReadConsoleInputA
ReadFile
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
Sleep
SystemTimeToFileTime
WriteConsoleA
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
WriteFile

user32

MessageBoxA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ