NEAS[.]d233a08b233e8d62671ba1cf8dac7c20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d233a08b233e8d62671ba1cf8dac7c20.exe
Size

22KB
MD5

d233a08b233e8d62671ba1cf8dac7c20
SHA1

285401e2705f1a062e676343c00f459d21d13af6
SHA256

540b4775dd5278e4c9af5632a68edc70cce78eb1570b1a6b3c038b7a1aa41df6
SHA512

9a0c3255bb6fedcc77aa8130ed137bd1b4e8e52c12f8cace5db68ecc2309a578dbcc27a92ec05e4b2dbcac418a9c5312b3c64544e68fc1562423458e94e02c91
SSDEEP

384:ErzPvjNiMKcWMAyYPHP/V6q5TUKJrHqtvdGHt+Wml8nbqGhicp:ErzvZmcWZy6lpqt1pWmKnbqGhicp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d233a08b233e8d62671ba1cf8dac7c20.exe

Files

NEAS.d233a08b233e8d62671ba1cf8dac7c20.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE