NEAS[.]bdbb654c346a5bdc85d6dab353a0e1c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bdbb654c346a5bdc85d6dab353a0e1c0.exe
Size

3KB
MD5

bdbb654c346a5bdc85d6dab353a0e1c0
SHA1

44df8c57e982d3b7ae0747f0950bea1815609a49
SHA256

1ce95c35999f381b8cca12c00ea122aae71a197c89c2981cbe72027980066ab3
SHA512

ba21bb6a0156fc9022f0aa663abce0539be8e77cbb2ad8e2935f0e3b0d8abdc2c2ef75c15faddb276b1e20523ce128e7ff416a822bebacbd3ea4f07d7b4c5c5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bdbb654c346a5bdc85d6dab353a0e1c0.exe

Files

NEAS.bdbb654c346a5bdc85d6dab353a0e1c0.exe
.dll windows:4 windows x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ