NEAS[.]602df44d914d45288f334327d492f9c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.602df44d914d45288f334327d492f9c0.exe
Size

119KB
MD5

602df44d914d45288f334327d492f9c0
SHA1

d441c30813152d1435db442ef620ec536d38a5de
SHA256

7a0e05f84425520a72c7ef79e2c6656a3a9ac8e69bc1d8b6296d56ff2213b52b
SHA512

a18f42073bdbf38ef175f5fc9598ce567ee9fdf23b8a7b49c9c5e36672e4d1237f151bfdb5685e3430e725b3c359e065970dc949519d58ed53f9d0b5e2146462
SSDEEP

3072:T52wJoA6e1i6yDUoJXvzZUihDbvfhX1f04NW:tpYkyD5BvaihjfhXdI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.602df44d914d45288f334327d492f9c0.exe

Files

NEAS.602df44d914d45288f334327d492f9c0.exe
.exe windows:4 windows x86

7bd15ae596a71a104e7074b7dbdea3b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentConsoleFontEx
QueryProcessCycleTime
SetLocaleInfoA
GetComputerNameA
RegisterWaitForInputIdle
CompareStringEx
GetModuleHandleExW
GetNamedPipeHandleStateA
FatalAppExitA
GetPackagePath

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE