NEAS[.]61a57cc5e3053b2e39a1b5a6e5e55540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.61a57cc5e3053b2e39a1b5a6e5e55540.exe
Size

3KB
MD5

61a57cc5e3053b2e39a1b5a6e5e55540
SHA1

22dc014d4069e2e2799f67cbafd63231748fbb36
SHA256

23724471867a689ff3b1325ceace13dc53954a1fea863fe839e3f6a34802262c
SHA512

2b6f6251362ac912607b834693df120fd0ad3a631a2ac0e40850d1e6afa5320b89ecfdc5e29de263a6add8205fdf696f4ffbc45cb78e54cb1b793ad318fdf7d6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.61a57cc5e3053b2e39a1b5a6e5e55540.exe

Files

NEAS.61a57cc5e3053b2e39a1b5a6e5e55540.exe
.dll windows:4 windows x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ