NEAS[.]40978c68bf13c7eb897ad46bdef79e30[.]exe | Triage

Sharing

General

Target

NEAS.40978c68bf13c7eb897ad46bdef79e30.exe
Size

139KB
MD5

40978c68bf13c7eb897ad46bdef79e30
SHA1

0ae94e670ee6ffc890cb240f2dc70f7a800abbd4
SHA256

bcd9a6064c539b503fc4d0b6423b93dc46f762784db17f56a0d85673bb15d042
SHA512

277266ca43693ce6606edd0ae3a539e09c4e3ab26c60eaf49976e47a31f8d3fdbd927fc5f761edfac9334059cd564ce0c2f4963f007bd2cfc532bbd663bea49a
SSDEEP

3072:/taoHTRyhoAScL060gorCr04r1RHrvnTEMRPOyCHklq:0uTaGFgo+LzvYMB3CHklq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40978c68bf13c7eb897ad46bdef79e30.exe

Files

NEAS.40978c68bf13c7eb897ad46bdef79e30.exe
.exe windows:1 windows x86

64369b902be8b667b461145ef39ae6b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect

crtdll

__GetMainArgs
exit
raise
signal

ole32

CoRevertToSelf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 620B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 228B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE