NEAS[.]68b58565b72273a966d61cab4e529a40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68b58565b72273a966d61cab4e529a40.exe
Size

119KB
MD5

68b58565b72273a966d61cab4e529a40
SHA1

4be1014bbfb0eabdab9046d45dd3c56b849dc972
SHA256

be00ff4fb9ad8db513e3b052dca7cb1817ae83642079f38a12e583571803ba41
SHA512

32a3b8161f6795b0d0e2993bba109d5186db2a93bc7c8e1d297ab910c0128171ac5c8c4528b142e8d005064befec304fc02303779d081801ac2c35526da3814c
SSDEEP

3072:wb+4m8ia2FWQbBiVTWS6QTXUY7cahhB4TFGe:wbGK9Q9iVTWS6UD9+Tse

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68b58565b72273a966d61cab4e529a40.exe

Files

NEAS.68b58565b72273a966d61cab4e529a40.exe
.exe windows:4 windows x86

89ef0b771862c2ac845b0a3d58839dda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZDone
GetPackageApplicationIds
GetThreadIdealProcessorEx
GetHandleContext
LoadLibraryExA
SetUserGeoID
GetCurrentDirectoryA
GetNumberOfConsoleFonts
AddLocalAlternateComputerNameW
CheckTokenCapability

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE