NEAS[.]74b415c61bfe51f694502e04d63b3f90[.]exe | Triage

Sharing

General

Target

NEAS.74b415c61bfe51f694502e04d63b3f90.exe
Size

14KB
MD5

74b415c61bfe51f694502e04d63b3f90
SHA1

6fb90d4d371836ab7054338996be8b5f1baf4894
SHA256

21f90194cd609510b178fdec422c337a60a187fac53bf30d99205fb550b5de90
SHA512

20c6336699dfb12940b5e553702a0b2793b5ff2028c757b7135b9903140e31b9415e89d39c377ea9bb5d4315cc39f1c7d682da27080949bc67acdbbe9fc56e3d
SSDEEP

96:0S4wH6tGQaN5YEwr5dDwXOwEnyKVL5p/5Dcq0+ppI7fB0j27Ka8pCirDUurjJV5g:n4waMqEUk0p/empKKG8CDr/s8oyuiT4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.74b415c61bfe51f694502e04d63b3f90.exe

Files

NEAS.74b415c61bfe51f694502e04d63b3f90.exe
.exe windows:4 windows x86

856ce4da93bd2ed1b6df9380e8941de1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgobject-2.0-0

g_type_children
g_type_from_name
g_type_init
g_type_name

libglib-2.0-0

g_fprintf
g_free
g_log_set_always_fatal
g_malloc
g_strconcat

kernel32

ExitProcess
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
atoi
fputc
signal
strlen

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE