NEAS[.]227ff77069e1cf3aad2510b656cc0990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.227ff77069e1cf3aad2510b656cc0990.exe
Size

27KB
MD5

227ff77069e1cf3aad2510b656cc0990
SHA1

d0dae29708c97fef468f20b087471025ae03ecc6
SHA256

43c88728a8441fae932c9cbf2e5b5d45b4685ef784f3ec4ce4a865cf78e1a324
SHA512

75961e8da3296b6e4db988d6fe1c2ab180405c46fe9502df72ccbb0a97d4a32507b8944e9a1e572a534d12918c237c8055f11447aebdefbd3dd3e8e0ae5071af
SSDEEP

384:O3KHWrwlDmtKUAwuHe0M3tDCQMGJpQ1zs:qKHZ4taHGtDsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.227ff77069e1cf3aad2510b656cc0990.exe

Files

NEAS.227ff77069e1cf3aad2510b656cc0990.exe
.exe windows:4 windows x86

d63cb533df47526b3a0bae7512fa65db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED

Imports

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

_getche
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
putchar
scanf
signal
strlen
strtoul
system

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1024B - Virtual size: 984B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ