NEAS[.]5e3bcbe9861366f53719ba1ecd5770b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5e3bcbe9861366f53719ba1ecd5770b0.exe
Size

45KB
MD5

5e3bcbe9861366f53719ba1ecd5770b0
SHA1

a586f20674a58d6b86b120288ef6f403ebbefae5
SHA256

aae7314b09da3d50410a04c36155d650fc1e945ba35a45de687def13007f6084
SHA512

bdaf02305ca2da25bdec9c3fe12257926f44633b55f5a48d094f2a30271998b1fd0d9952aad88c23727ec327ff796f40508a250a1d9df98656aeb31fff5343df
SSDEEP

768:ErzqmykDY3bpFVBUlSZZxG+4NWB4vVo1EThysik7NAvvy9avO:EqCY354S1+Wuo1yPikx+vIa2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5e3bcbe9861366f53719ba1ecd5770b0.exe

Files

NEAS.5e3bcbe9861366f53719ba1ecd5770b0.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE