NEAS[.]e6dc9a3d47c930fc0e25c86bcf2ec1a0[.]exe | Triage

Sharing

General

Target

NEAS.e6dc9a3d47c930fc0e25c86bcf2ec1a0.exe
Size

119KB
MD5

e6dc9a3d47c930fc0e25c86bcf2ec1a0
SHA1

0f70c349b08bb8964547fdb24dfdbf638905a451
SHA256

a728062a4f3883fb02d6f4364300db1b6b0c1ec6c1554446c9d9401e7cc24c2c
SHA512

63110016e05203089eb0846611a5941ed9eb0b14da9ea871082464b1a9f2596b94dc514c787ba30a332776434b7106acedbe740114d77fd8b6e8c8f1dec8b3fd
SSDEEP

3072:K98kYrFEpzPNYTc16XsiXCvxCvQxnw562f:JkeEpzuY+QvYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e6dc9a3d47c930fc0e25c86bcf2ec1a0.exe

Files

NEAS.e6dc9a3d47c930fc0e25c86bcf2ec1a0.exe
.exe windows:4 windows x86

f59fc62520844240e5377eba81aef80d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationByHandleW
GetLocalTime
GetMaximumProcessorCount
InitOnceExecuteOnce
GetSystemPreferredUILanguages
K32EnumDeviceDrivers
RegDeleteValueW
GetDiskFreeSpaceExA
CreateDirectoryTransactedA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE