NEAS[.]f49aa8f0dc6d8cc109140d8c294f6790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f49aa8f0dc6d8cc109140d8c294f6790.exe
Size

7KB
MD5

f49aa8f0dc6d8cc109140d8c294f6790
SHA1

f54fc392ad9e6e56f409fc62da3c9b99ba91f452
SHA256

b7f0ee45533f82f7a87fed719ccb7cd77823ced76a92852999cea8a0523b3262
SHA512

542c5170c35dfcac06b6fa755b8db92549a1e5c56d8cac79713f94a088ee1dc408ec5c409a12083d7d2bd1387bfa768b2347c224d1cdf358a2f5f25390e242fd
SSDEEP

192:k/uEeOsq7BMk0vW/WgpDtkzfmEgG5WJPckwlbR:iDqqFKvW/Wgpxif3gVJ0kM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f49aa8f0dc6d8cc109140d8c294f6790.exe

Files

NEAS.f49aa8f0dc6d8cc109140d8c294f6790.exe
.exe windows:5 windows x86

72ceb0cbf6000bfc508ffa5a3a2f917b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_cexit
__p__fmode
__set_app_type
_controlfp
_except_handler3
_XcptFilter
_exit
__p__commode
_c_exit

kernel32

GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE