NEAS[.]b3d2cc328615f245127feebf647d7990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b3d2cc328615f245127feebf647d7990.exe
Size

37KB
MD5

b3d2cc328615f245127feebf647d7990
SHA1

a84069f5b463b6c28bb2cdf0152cf414cae1aaf8
SHA256

c8971b165f5cfd10ccfc74f57993ea9981f01ccb592cd2dcfca6da3ec4bf7100
SHA512

53b5b4ebfa6c13396de844a2b6fae1a7bd8c0cffaf0ae637aa799d997c3a6fe2b0bb4eeff4752ff4855d23e40b4ab51a8520961590303d7921163b3cc6c493c8
SSDEEP

768:Tm/ipONpXADUUJeyeukOcXCGhuzZBie7y+VL0tnWO:6/icNJj+dPkO1G6ZgeD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b3d2cc328615f245127feebf647d7990.exe

Files

NEAS.b3d2cc328615f245127feebf647d7990.exe
.exe windows:4 windows x86

d5d8c80d51a1693cd62202ac6608f35c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

Sleep
GetStartupInfoA
GetCommandLineA
GetModuleHandleA

msvcrt

strstr
_strdup
_controlfp
__set_app_type
__argc
__argv
_environ
__getmainargs
exit
_XcptFilter
_exit
_except_handler3

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE