NEAS[.]b36469a88ff303b35b50d96c4a663500[.]exe | Triage

Sharing

General

Target

NEAS.b36469a88ff303b35b50d96c4a663500.exe
Size

7KB
MD5

b36469a88ff303b35b50d96c4a663500
SHA1

05611a9b5411b3f958f71344edace081edc02e04
SHA256

3312bd7f7d93ce089b1f8ea0d8eb1d10da5587c764041fce1a90343d170840a2
SHA512

ea502a052afb999f5243025cd52eae645b919a91265747654038960e0b0f4e9b09e18a4ce15efc9125fedd9e029156545bbe8ecf160b0eb11bfce4979b7bddd9
SSDEEP

48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWTbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPBq3qX5S2hV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b36469a88ff303b35b50d96c4a663500.exe

Files

NEAS.b36469a88ff303b35b50d96c4a663500.exe
.dll windows:1 windows x86

731b7e280add7ddd2d8bee2511c30cf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
srand
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 712B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ