NEAS[.]5cd31c67c59490fa7e06045f0079f020[.]exe | Triage

Sharing

General

Target

NEAS.5cd31c67c59490fa7e06045f0079f020.exe
Size

7KB
MD5

5cd31c67c59490fa7e06045f0079f020
SHA1

013723bab5444b56400358f5e97ae1b97cc12ec6
SHA256

ee0b2173abe551b1cf0c5010d58e0236d84af47ef27848002cbfcc2b87c1a274
SHA512

d47c4e7dd7807b4f2ef94dff994fe1fe9cd42522e779bb694433e10a06d7c730ae5d7091a5637aa6c6822f61e1695c678649adab734e76a7401b50185e092069
SSDEEP

96:E170ui6jPPLSW6txZeHVXc5slBPb3RnWw2XXuJZAMk4WEWGRnWw:yrpz+W2xZaXX/tnWJuDAMk4rWMnW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5cd31c67c59490fa7e06045f0079f020.exe

Files

NEAS.5cd31c67c59490fa7e06045f0079f020.exe
.exe windows:5 windows x86

8c9f38d57f27645e274cbc37fa815ee0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit

advapi32

NotifyBootConfigStatus

kernel32

GetLastError
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ