NEAS[.]34af3631c97b231c7e8d2035b9945c10[.]exe | Triage

Sharing

General

Target

NEAS.34af3631c97b231c7e8d2035b9945c10.exe
Size

3KB
MD5

34af3631c97b231c7e8d2035b9945c10
SHA1

2a35b4d60d90da7e8966b54a0bf3a3d5277db6cb
SHA256

fd5a863df04fee3042607fb5c82b99ca2cc7dbc4922ec8ced0afbe05801e0828
SHA512

64e7e1c9a7e36ed53c2272d8827a12e0c08e1e6046606a9a528f58712220b1b911ca6a44b905d76ef18fbffcf2880e475a01b7813ffdc9447f6a9b28b5dd1c6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34af3631c97b231c7e8d2035b9945c10.exe

Files

NEAS.34af3631c97b231c7e8d2035b9945c10.exe
.exe windows:4 windows x64

1d102bfe047316e1f0803d6938e60bd7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetStdHandle
VirtualAlloc
WaitForSingleObject
WriteFile
lstrlenW

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE