NEAS[.]6288a4b953b24635b20f2d24345cb190[.]exe | Triage

Sharing

General

Target

NEAS.6288a4b953b24635b20f2d24345cb190.exe
Size

119KB
MD5

6288a4b953b24635b20f2d24345cb190
SHA1

ffb2f44fb4d191791fe355db1fdd3f956a7ee6fc
SHA256

2f667ff7d711ad8cbed1aebda2cbe30f179e8bdfd2ba5460387481decdfe0459
SHA512

b8c6a98f7f369ab93bc8761c1cd8f848dde4d014386de452be2983a1407ba2be3a77dc63207bb02284d441252ca119d28200525b84d652fc53b36cdfec87e131
SSDEEP

3072:ad51e+VMGmnk7adCT+Ee/aCUqiRhf6SpLgiDYlWBm1:ad5M+VnmddCiESa5f6Qk7lWY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6288a4b953b24635b20f2d24345cb190.exe

Files

NEAS.6288a4b953b24635b20f2d24345cb190.exe
.exe windows:4 windows x86 arch:x86

4efbdcc1a0aa32219d42f8bafc130c1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsA
ReleaseSRWLockShared
SetFilePointer
CancelIo
GetConsoleFontInfo
EnumResourceLanguagesW
Process32First
FlushFileBuffers
ConvertThreadToFiberEx
GetLongPathNameA
BasepAppXExtension

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE