NEAS[.]c6edd22fa18aa4234964889ed2592a70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6edd22fa18aa4234964889ed2592a70.exe
Size

119KB
MD5

c6edd22fa18aa4234964889ed2592a70
SHA1

187dcd0b13bc07400b053b262c239f077ca1c3ee
SHA256

1a850d18cc707b7cd3768ed6b94b3b00f3e14126e4dd195960871c1352c36d0a
SHA512

08b420f291d679611d68a177f8db4d22dc6c6a806065af9f257cbab9e7c91fb0ddcc98649a26a0e27372f0087c3584fddd6709af6c10f221a37c11a8b538c625
SSDEEP

3072:m2ANBhzXjM3sFO9K2yCX+xnf4Vj5kTPuDwEKUB1vOzDA:ITzYiaFJEnfUSTPuD7NeHA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6edd22fa18aa4234964889ed2592a70.exe

Files

NEAS.c6edd22fa18aa4234964889ed2592a70.exe
.exe windows:4 windows x86

28264617109a3f3cae0a756e12bf6dae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PssWalkMarkerRewind
OutputDebugStringW
TermsrvGetWindowsDirectoryW
MoveFileTransactedA
FindResourceA
IsValidCodePage
SetSystemTimeAdjustment
OpenConsoleWStub
GetCurrentThread
GetProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE