NEAS[.]252581dda42ecb66a151f9ce144448c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.252581dda42ecb66a151f9ce144448c0.exe
Size

119KB
MD5

252581dda42ecb66a151f9ce144448c0
SHA1

453b066efb90a94d1cf2c24e25d981c32bec26ba
SHA256

d53f72b0c1cf045601032341ccd2aeac3f5ca4b8ff9ee62d4a0bac875bd99017
SHA512

917d7e2253dbe200e09d03d1ecedebbfb6a3b3c1f166a7938412c80f67736c406b3fc53764db5ef374076af544b192346fe670b56c86cc9d0eb3631ff0d156be
SSDEEP

3072:5Pg25f4u8wvAUgJcckZtXVZWDHa2u8SCw7Fymjd3:5lHvAU6NkZVfW7a4SVFyUB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.252581dda42ecb66a151f9ce144448c0.exe

Files

NEAS.252581dda42ecb66a151f9ce144448c0.exe
.exe windows:4 windows x86

8e6a517784f68b3ba880baac8106cffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForInputIdle
FillConsoleOutputCharacterA
GetConsoleFontInfo
CreateToolhelp32Snapshot
CancelWaitableTimer
IsNormalizedString
EnableThreadProfiling
GetFileMUIPath
WakeAllConditionVariable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE