NEAS[.]51c7e8620f41e88607018e584251c2b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.51c7e8620f41e88607018e584251c2b0.exe
Size

47KB
MD5

51c7e8620f41e88607018e584251c2b0
SHA1

b3a2efa505ed1791a8683938fe2103f6849de8d3
SHA256

e6fb679da23401668c10ecbf730ffa6e7f9cdb8332f94253950ccfca537948eb
SHA512

63cedac5cbff637ece0087090f97aa4c8e778916679aeff9b3a7032b53b0b0464b24eba64e1a73f18cc8c55609f47c196797a480786870d45b22a930019d8dbb
SSDEEP

768:xnfTHLBhbanF06HUZZMxdnzEPAY7U56lGsp6Pr1fvIKEdTzuhOChC38usHfJY6EN:hfTrynsZ+nzEPAu7lGsp6Pr1fvIKEdTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.51c7e8620f41e88607018e584251c2b0.exe

Files

NEAS.51c7e8620f41e88607018e584251c2b0.exe
.exe windows:4 windows x86

5be473bee4fbb1a3013ac1314680d70b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
fseek
ftell
fwrite
malloc
memset
printf
signal
strcmp
strncmp

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE