kutaki | NEAS[.]f9678cfee8af60c33d0eaa8255f88a30[.]exe

General

Target
NEAS.f9678cfee8af60c33d0eaa8255f88a30.exe
Size 2.3MB
Sample231022-v467bsbb7w
SHA256 986ba2daea2ba5a4db9d9115aeeea049ce4debd4f44214df1433dd7ce5753116
MD5 f9678cfee8af60c33d0eaa8255f88a30
SHA1 c99cd87bb5cdd3d0f421cd39d994219490831489
SHA512 6ad4d78a70ada8ba61b6b64689378d57d9db658cbf955c1b9cc12ca4984ff9b02cd69c78fb5399b92859e46306fe018c6f7dee068375f99af63bb24d8c923682
SSDEEP 49152:5kWk5cS7a+9XYaQJZehc4mTYJ78V9gyBn4czfmP/SA8N:lajJGZ942KQV9hp4cfmP/SA8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kutaki

Family

C2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f9678cfee8af60c33d0eaa8255f88a30.exe

IMPHASH 80032896aac2fdd83c81f0cdfc2454f2
SHA256 986ba2daea2ba5a4db9d9115aeeea049ce4debd4f44214df1433dd7ce5753116
MD5 f9678cfee8af60c33d0eaa8255f88a30
SHA1 c99cd87bb5cdd3d0f421cd39d994219490831489
SHA512 6ad4d78a70ada8ba61b6b64689378d57d9db658cbf955c1b9cc12ca4984ff9b02cd69c78fb5399b92859e46306fe018c6f7dee068375f99af63bb24d8c923682
SSDEEP 49152:5kWk5cS7a+9XYaQJZehc4mTYJ78V9gyBn4czfmP/SA8N:lajJGZ942KQV9hp4cfmP/SA8
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths