NEAS[.]f3f8b748ccd7d974bbd0b1940cb7b520[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f3f8b748ccd7d974bbd0b1940cb7b520.exe
Size

21KB
MD5

f3f8b748ccd7d974bbd0b1940cb7b520
SHA1

ca61d686a06b02f9e81aadb44e7a133ae0312d8e
SHA256

b2701ae7cf95701979e189b5629836534f147553c37457cce44c3a3d77528715
SHA512

8dfda51b296d2dc956d06b42cd29739d0034cc41a080b0854f94de3328bd82bfaa8c0da902f9237a4e0fa46d1efc315b8a368473e4c6d515661ab7fb2fac4d41
SSDEEP

384:ErzP2E66fVH85KkpaV7lZgqMd7Bn5rSgCocgkYQ/74vEV8MOUkJCFeT60yDcqvgD:Erz2EEgVRZ1Md7Z5rSngkY2rVHOLCFQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f3f8b748ccd7d974bbd0b1940cb7b520.exe

Files

NEAS.f3f8b748ccd7d974bbd0b1940cb7b520.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE