NEAS[.]3ed1c34820f3a029eb11d41fb1185b10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3ed1c34820f3a029eb11d41fb1185b10.exe
Size

22KB
MD5

3ed1c34820f3a029eb11d41fb1185b10
SHA1

456b113074b74869b7b136b2152aad3258ade04a
SHA256

61fb1200425d4b18e39d6a84c89e9fba1efe578bf16fb8b526a118b1cebaa15e
SHA512

becc34a51d39861abf8e2d9f666128822d51c8a5c32b590d2a81725642587cfdab7d16986f10ba08410633ba7b6f16dfa88422a02deea40ffc5f85c6ebf25fb2
SSDEEP

384:7N6/9t1Dhh2GcNUPyGeVAwTIFrUQFMYLXzR/KxXj2wHfjNjlPlZLEc:U/9t1Vh23GnoIFrUQXDR/KxtjNjN7Yc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ed1c34820f3a029eb11d41fb1185b10.exe

Files

NEAS.3ed1c34820f3a029eb11d41fb1185b10.exe
.exe windows:4 windows x86

9a2bc6a13a2613f98e887b6616abde30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFilePointer
ReadFile
WriteFile
GetFileSize
CreateFileA

msvcrt

puts
exit
malloc
free
printf
_strupr
strtoul
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ