NEAS[.]896badede2917d4cf5f062b69bf1f990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.896badede2917d4cf5f062b69bf1f990.exe
Size

4KB
MD5

896badede2917d4cf5f062b69bf1f990
SHA1

dde691a46f816d0293310ef03c3fc75ef4ac8403
SHA256

da43993ce24eda7e75f3db018d531fd489601a82c09f22b988578c9073d6ac54
SHA512

1c7e711bfd916aeeba3f321183dba01a83e22c154ed2cb8632958ace8767aaf2b5754eeae0269870624732be6637fd4fcd0ddfdafa8330ba9e4f15f276b1e944
SSDEEP

96:LDLo/GIIXotXA7AflOOC8nUf/WsF2oybIg:U/GdXsQCsR8UW8NybIg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.896badede2917d4cf5f062b69bf1f990.exe

Files

NEAS.896badede2917d4cf5f062b69bf1f990.exe
.exe windows:4 windows x86

79487a5243a3cf8765e3aa18a430dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

_fmode_dll
_fpreset
_iob
__GetMainArgs
_setmode
atexit
atoi
gets
isdigit
memset
printf
signal
_cexit
sprintf
strlen
_environ_dll
_fileno

kernel32

ExitProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE