NEAS[.]f50641f9a7d44f511c813d4b2a3a1610[.]exe | Triage

Sharing

General

Target

NEAS.f50641f9a7d44f511c813d4b2a3a1610.exe
Size

20KB
MD5

f50641f9a7d44f511c813d4b2a3a1610
SHA1

900b3aefe19ce3d5fdcbc079173e96463f3c154f
SHA256

e728721834debf317f00dd9878e728024ac7460c2039e78a75cddb01d7af0626
SHA512

c4272c1d1d50fab28f1df97423f3cdad0cadd4f6ce4a737232f38dc59fd88ff6d7f9fe5c18d08c56b2bba88b646e1a238997adc644dd910696c600ce7267ad87
SSDEEP

48:aHFr/Wbwrf34X3u9mBJmez05tboyl1OE4zx8edBcrhKX:9Mf7Vptboyn1G+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f50641f9a7d44f511c813d4b2a3a1610.exe

Files

NEAS.f50641f9a7d44f511c813d4b2a3a1610.exe
.exe windows:4 windows x86

2c4d39b87e7e1d4a34221318703449f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance
CoUninitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ