NEAS[.]f06406124bb4c61143d4fb03eeee29c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f06406124bb4c61143d4fb03eeee29c0.exe
Size

119KB
MD5

f06406124bb4c61143d4fb03eeee29c0
SHA1

024585c4916781b2518ab6e29dc3c15b18532d19
SHA256

05cb5698337bff60a7a8fabbca34b55beeb43975a6639eb22f110c75661081bd
SHA512

5ff7503f59fd7e273fc23c64859e0916bdf25a3d487d699b96e857c8bfea4629e43d0f6a68e5efc1b223cf2a9bd66ca51b38d08baae26b3fa95e1ce7fc7eeb36
SSDEEP

3072:RaGmgmlKyuSdtGQ01Yk94+m0jVRY+E7k1r8/2nYg03QHe7:RaC4Op94+/jVRYT7kFYg03Ou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f06406124bb4c61143d4fb03eeee29c0.exe

Files

NEAS.f06406124bb4c61143d4fb03eeee29c0.exe
.exe windows:4 windows x86

16de28b29cdaf845407fde700e50e017

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
ReadConsoleOutputW
AddLocalAlternateComputerNameW
IsWow64GuestMachineSupported
BasepCheckAppCompat
GetFileSizeEx
ReadConsoleOutputCharacterA
FindNextStreamW
NeedCurrentDirectoryForExePathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE