NEAS[.]6749561d609fb95a04815b267931fca0[.]exe | Triage

Sharing

General

Target

NEAS.6749561d609fb95a04815b267931fca0.exe
Size

119KB
MD5

6749561d609fb95a04815b267931fca0
SHA1

4bc10dd078cd9db611cb9bdd09ed433d25d7aead
SHA256

7c451eb16f3f30dc64d96221e096f3c536fd51ec9749ccf64b456016890c5874
SHA512

afc36147c032a6153cdfc46f39120078003b7532bb4bf1b354ecc48b5f2eea30a559a06105d0b0439a5c1ba399b6671a2aca02802f74259a6e515818ac75ad3d
SSDEEP

3072:rpthemlEExZUGhSm3zEXnlYPJyfVbKGugBWpvouE:rptMOlxZzSm3zEXlQs3rW6uE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6749561d609fb95a04815b267931fca0.exe

Files

NEAS.6749561d609fb95a04815b267931fca0.exe
.exe windows:4 windows x86 arch:x86

0340bd4ef6698018e886abd81275d9e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ScrollConsoleScreenBufferA
UnmapViewOfFile
ReadConsoleOutputA
ReadConsoleInputExW
EnumDateFormatsExA
GetAtomNameW
ResolveDelayLoadedAPI
OpenJobObjectW
SetTimerQueueTimer
Module32First
GetFinalPathNameByHandleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE