NEAS[.]41d408db424dabe23e109f13cba50370[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41d408db424dabe23e109f13cba50370.exe
Size

7KB
MD5

41d408db424dabe23e109f13cba50370
SHA1

2f366884bfee32ca35bb820f7de29d4ff69ac918
SHA256

f75494b4dbfb0c5e70a2c4d70410b2d8091b119f4aeb3bd57d91ccffe7936294
SHA512

99a8e93d9bf0e3a2d3bec1d3d2fc477fd41347ed26e77ac892dc4bd925ce39f889dbf3dc1619774f5aa620a31880072f5461f227476a2728a6710fea5f1bdc30
SSDEEP

96:E170uiMxaKp0nDnx8wn6kysRgj8RnWw2uJZAMk4WEWGRnWw:yrrxr0Swn6BsRlnWXuDAMk4rWMnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41d408db424dabe23e109f13cba50370.exe

Files

NEAS.41d408db424dabe23e109f13cba50370.exe
.exe windows:5 windows x86

8c9f38d57f27645e274cbc37fa815ee0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit

advapi32

NotifyBootConfigStatus

kernel32

GetLastError
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ