NEAS[.]6e7d633446ab25e8be9dc1083a760cf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6e7d633446ab25e8be9dc1083a760cf0.exe
Size

119KB
MD5

6e7d633446ab25e8be9dc1083a760cf0
SHA1

4b914677432130ad12f9d7558fa7852e645ed4f9
SHA256

a34b69ec66853dac1e7d394fbdbbce77c6d0bb09fc3557ed41ba9429ec051864
SHA512

62ee10241a16a1f071174bc05b9b9c7d6c0f927f3109e2976023dc6f5934277ff57a79ddf1a026be7f6ee4bf2be6efccd201750a3c747601497771bfe003a417
SSDEEP

3072:Wp5+GeF4nO4WFMeRAkLEJ7u4gHvlP/NQZhATKETlJL4yD:eQ4hWMsy7uZvF+Zh7yEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e7d633446ab25e8be9dc1083a760cf0.exe

Files

NEAS.6e7d633446ab25e8be9dc1083a760cf0.exe
.exe windows:4 windows x86 arch:x86

037e9abd0bdde963747eddaed6dc50c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPreferredUILanguages
EnumResourceLanguagesExA
SetProcessWorkingSetSize
MoveFileTransactedA
GetCommandLineA
CreateTimerQueueTimer
ClearCommError
GetConsoleAliasExesLengthA
RemoveVectoredContinueHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE