NEAS[.]533811c7fbe96ce2395beefe213da0e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.533811c7fbe96ce2395beefe213da0e0.exe
Size

36KB
MD5

533811c7fbe96ce2395beefe213da0e0
SHA1

35462a649af59f13e6b7118effb5156e57c4967f
SHA256

c63c5adb63fa37598ca891a4fd167ce8498dae940a6c7197a378cdabbb417f6c
SHA512

14a35141ed8c14a6f8eed4666a30b73c9f061e95d011404d5ab03631d7c531dadd154ad14119132c40e456d8ae572038bc03f78ed1288446c50a4cdba6ecc1ba
SSDEEP

384:Q6yn1lSuRBHZQAo3ztI2lcI1uHcyxZFtCpYwvginGKSpPW:Ryny+5m1kHcyFtCTvrJ6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.533811c7fbe96ce2395beefe213da0e0.exe

Files

NEAS.533811c7fbe96ce2395beefe213da0e0.exe
.dll windows:4 windows x86

8d3f7348be3218c6be601918137aa814

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

p2x584

Perl_sv_2pv_flags
Perl_Tstack_base_ptr
Perl_form
Perl_get_sv
Perl_croak
Perl_newXS
Perl_sv_2iv
Perl_warn
Perl_Isv_yes_ptr
Perl_Tstack_sp_ptr
Perl_Tmarkstack_ptr_ptr

user32

DrawFocusRect

msvcrt

strcmp
sprintf
memset
_adjust_fdiv
malloc
_initterm
free
strtol
memcpy
_ftol

kernel32

DisableThreadLibraryCalls

Exports

Exports

_boot_Tk__Listbox
boot_Tk__Listbox

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ