NEAS[.]ac623164c85c339cf42f5c647a940440[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac623164c85c339cf42f5c647a940440.exe
Size

7KB
MD5

ac623164c85c339cf42f5c647a940440
SHA1

1f2ef83b56325d2eab4e16669996d43c8ae0bca2
SHA256

397763fad1c57aa7a01f7e468787d25df7c40491e2092fd8271148d6a74d03a9
SHA512

19fd880c4b04a0449b118b47cdb07c93b40666acb5efdc9fe27c1b380b26b01785a9f1b9bfd92ab2a4882b4bece18e0fa6336c721592fa2d85ee963a605a4277
SSDEEP

96:LziL62F3zO+y9y2tPpSJIdsbuD1b3aVIEWd5Gbwr0OFZk+1epMkIKTuIEWdkH8ZT:L8Nog2txS9auBWz6w4OFZwMk/KBWsyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac623164c85c339cf42f5c647a940440.exe

Files

NEAS.ac623164c85c339cf42f5c647a940440.exe
.exe windows:5 windows x86

4daa50fb1bfde898cf3800cd964c91dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_controlfp
_except_handler3
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__set_app_type
_c_exit

kernel32

GetModuleHandleA
lstrcmpiA
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
lstrlenA
GetStartupInfoA

ole32

CoRegisterSurrogateEx
CoInitializeEx
CLSIDFromString
CoUninitialize

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ