NEAS[.]295fc19103fe2b90cb0e0d2954e00470[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.295fc19103fe2b90cb0e0d2954e00470.exe
Size

21KB
MD5

295fc19103fe2b90cb0e0d2954e00470
SHA1

feb0e8601d9fdc21ac894ad74478cb4ffed77903
SHA256

dc10ed20581f9faaa334894c3801ae9ffec5f951306398654b23e5041b3ecd9b
SHA512

72cfefe2a9e003b63aa7b888d77b20009d98ee65f24161a0ed62a9495974a174e90cf2fc8ea5618313f46d3b7f30ffc704bb6dec074a5c406a029c106d63eb69
SSDEEP

384:ErzPsxCFCOg1+4c2o09FzWVYIXNdCedYj9zodW:ErzsxrOt7/60X7Cj9EU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.295fc19103fe2b90cb0e0d2954e00470.exe

Files

NEAS.295fc19103fe2b90cb0e0d2954e00470.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE