NEAS[.]e0cc84465c6a718ad012f166409454e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e0cc84465c6a718ad012f166409454e0.exe
Size

19KB
MD5

e0cc84465c6a718ad012f166409454e0
SHA1

338503571db577e55af6872ccfbaf1400ba976e3
SHA256

feb2ddbbb3b27a49bdaecc6ada373978cdce09c018e3063c5acb985ca9a4c710
SHA512

d76fea7cfd0000845dd230c66a7e67e6ad8831f99e901c2e741efc2f602b13d7242173520afe1510ae3a109435b6402bc58f9304fc0adc6ef59e4cee9fa1ac19
SSDEEP

192:LDPHGZFvCMDZjjsdrjTqcbraczkY6byZpz3ZjyFDDIqtdCD5:KvC4j+PqcbBz+yL1eBEqtoF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e0cc84465c6a718ad012f166409454e0.exe

Files

NEAS.e0cc84465c6a718ad012f166409454e0.exe
.exe windows:4 windows x86

6fdbcfff6170da2bc2fa9fd1c3d3d004

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
OpenProcess
SetUnhandledExceptionFilter

msvcrt

_popen
_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_pclose
_setmode
abort
atexit
atoi
exit
fflush
fgets
fprintf
free
malloc
printf
signal
sprintf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE