NEAS[.]e6f67668c5e661a5b4ffd57b3ce555e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e6f67668c5e661a5b4ffd57b3ce555e0.exe
Size

119KB
MD5

e6f67668c5e661a5b4ffd57b3ce555e0
SHA1

042ef82d81d521694520a74d31b6afd759cfec75
SHA256

fc43105d0684f6d4509058bb1a8a5df415c5915d17b6f1e63642c7f4593482c4
SHA512

e9b1cd810a7fccfead0182a957abcf20f8366ea086c387e2bb5e84fa418d61100547ca5f7bbd4a3865d240fb99230b270a8631314ac91f00f0d7378e103d01b8
SSDEEP

3072:vy+4fOHIwm6goU+rd4+OLe4e3rWhjXW6UxHVwpUZ9:IfGvm6tbdPeW6iepUZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e6f67668c5e661a5b4ffd57b3ce555e0.exe

Files

NEAS.e6f67668c5e661a5b4ffd57b3ce555e0.exe
.exe windows:4 windows x86 arch:x86

4a28c689eec9b96de4897915e34b42e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadDescription
NlsGetCacheUpdateCount
EnumCalendarInfoW
DefineDosDeviceA
SetFileAttributesW
InitOnceInitialize
DosPathToSessionPathA
GetConsoleAliasExesLengthA
WerUnregisterRuntimeExceptionModuleWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE