NEAS[.]9b4856c65826683f7dfaaa49eb2dd160[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9b4856c65826683f7dfaaa49eb2dd160.exe
Size

22KB
MD5

9b4856c65826683f7dfaaa49eb2dd160
SHA1

9f3271c4473e617d5a26e8c847bb4efa2e5eb563
SHA256

9a8c36e8c3a4a736183c69da45a4a04abb55ff28eb63063bb717172347a14826
SHA512

33a0c82d058a451cb984ac9b4e1ed4a027ce80f6cdda891fc6ec09e8b35db653be4c640d93edffb9e01a63b0c1d05089d47f86d81f7b1db99044a4232b272ab1
SSDEEP

384:jIz4S9VY21fumm2u/unLYcckYef2gkHh7w3OjvBPlO6At12DC:jIU8fumm29niC2XH4ivPOfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9b4856c65826683f7dfaaa49eb2dd160.exe

Files

NEAS.9b4856c65826683f7dfaaa49eb2dd160.exe
.exe windows:4 windows x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE