NEAS[.]1299e6dda63dcbecfcb8e45d6f065670[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1299e6dda63dcbecfcb8e45d6f065670.exe
Size

119KB
MD5

1299e6dda63dcbecfcb8e45d6f065670
SHA1

aa9c1e4cbcfbe1352dac1a0a7aaa0c614fdcde6f
SHA256

f74b68e53ba6b49d3b0e3295e034ed41934042b929db4f850221e7bfcdbeaf53
SHA512

93312da6295d2e2c83fdf892cfc75713c7514b24550f4f11c2a9e6740944776a27019c2e43ec7e16024315250a0f3772be499b501cef5952972e23790c508aca
SSDEEP

3072:bbuIpLC8ZTFRDG9hFU/v4F6X+Ab7KJvgm17r:Pd7ZTFRaSvEi+i7s/17r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1299e6dda63dcbecfcb8e45d6f065670.exe

Files

NEAS.1299e6dda63dcbecfcb8e45d6f065670.exe
.exe windows:4 windows x86

1f0b5b2c8495e8be45e13f75ecf0de6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryIdleProcessorCycleTimeEx
FoldStringA
PowerSetRequest
WerRegisterAdditionalProcess
Wow64DisableWow64FsRedirection
AddVectoredContinueHandler
lstrlenA
CreateConsoleScreenBuffer
DeleteFileW
CreateDirectoryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE