NEAS[.]be72ac2b9053e47b9b8d2c83db95fd30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.be72ac2b9053e47b9b8d2c83db95fd30.exe
Size

22KB
MD5

be72ac2b9053e47b9b8d2c83db95fd30
SHA1

96b3d3f2de4403e5c1640cd948e3fd626b90d7b9
SHA256

23dd7494cad7ee0b06ac33ca0138899722480c28fc1f1e3b2a4bbf8342900c32
SHA512

8750b82037778f3247c922bd02e65f494748c40a3f7097fb918fca7d90c60f6b3378e9e83c658dd4d5a68dc02f0f064ef297a123f88fb1d773b2784ca9531de9
SSDEEP

384:ErzPTDiJZdo6JXoNXeFEnPHshPwpL/ExTg1kbI6QB1U7Z/5nhzh+ozw:ErzaZNJunPHsh6yTg1qIRB1ch5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.be72ac2b9053e47b9b8d2c83db95fd30.exe

Files

NEAS.be72ac2b9053e47b9b8d2c83db95fd30.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE