NEAS[.]a42c77e35ebd039a687d1dceb73ecae0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a42c77e35ebd039a687d1dceb73ecae0.exe
Size

22KB
MD5

a42c77e35ebd039a687d1dceb73ecae0
SHA1

2e1b970b741593ac6635a5f0462b42b2e38319d4
SHA256

f25ccbc18157623d6760935405182ae3dbfe3a8d1d1c34dc809eafde23951830
SHA512

c72c484637d786e4e0d7337179e1a956a982f92eef692d6c07d8bb674417785190222152376bbb4881a20cee22e8bdcde12fad59192fb4a07167bf405cebbffa
SSDEEP

384:ErzPmCxvJX0i51sPtGQVr/c5gFI0wGnDUvzeEWKYDj2t1HygHZoe8:ErzmmJEioXB/cu9wUDUvqEWKY81HnHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a42c77e35ebd039a687d1dceb73ecae0.exe

Files

NEAS.a42c77e35ebd039a687d1dceb73ecae0.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE