NEAS[.]fae1841e7f4b5c780e398dcb2fb99c60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fae1841e7f4b5c780e398dcb2fb99c60.exe
Size

12KB
MD5

fae1841e7f4b5c780e398dcb2fb99c60
SHA1

e14dfae7b1aa059a932b4c28c1acd2151ffea354
SHA256

6af8964f25ed3d9d682f052e6f202d9bd58a72922b9e5e28023c2c9100838b0d
SHA512

252c2775bf23b9b35664985bfe2c99db8495efc8552422e83c4d4f77ee095b9654d45a130f0b577791a9563282082ff71df8806ec4a51df59a533fd7a339ff5f
SSDEEP

192:AKLarqySbIBCoFPkk+Y6O0OQmhM63iuoG9VohBl1WMZZduxdhZX1DwZX1DxXn:dbO3FPkkd60e6SCohZ+xd71K1NX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fae1841e7f4b5c780e398dcb2fb99c60.exe

Files

NEAS.fae1841e7f4b5c780e398dcb2fb99c60.exe
.exe windows:4 windows x86

0a1ea2cfaf63f78f6290eb66630e69fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
calloc
fflush
fgets
printf
putchar
puts
rand
signal
sscanf

kernel32

ExitProcess
GetTickCount
SetUnhandledExceptionFilter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 69KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE