NEAS[.]63327d412a2388a7fdc470906d8571a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.63327d412a2388a7fdc470906d8571a0.exe
Size

119KB
MD5

63327d412a2388a7fdc470906d8571a0
SHA1

732c19c3eddf717750e15afbc13beaab29bbcd71
SHA256

f0f3d04e649f1472e4edc03a71bb3b3d5b73a307a5563a1448e39eaf1968308b
SHA512

9723a920553ea40171d55fd7401b0befba326a25a1a1ac6459894c4813d5fb7a978c150879d4fb0efe4ce1d0d4207965fd0bec1c4c5d9d5ebc71d46bd8ca2df3
SSDEEP

3072:jxH5FkgbgVSwZ+WExMP92A/cJAWPftp9jYTnO4p:1LkgG+W9Vd/cJvPftrx4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.63327d412a2388a7fdc470906d8571a0.exe

Files

NEAS.63327d412a2388a7fdc470906d8571a0.exe
.exe windows:4 windows x86

392dead697cab6890677bdd2496d1146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CheckForReadOnlyResource
InitOnceComplete
BaseIsAppcompatInfrastructureDisabled
GetPrivateProfileIntA
GetConsoleAliasW
CheckRemoteDebuggerPresent
GetExitCodeProcess
PowerSetRequest
DnsHostnameToComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE