NEAS[.]6308a0ea080a7fb65014ec6e633ff660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6308a0ea080a7fb65014ec6e633ff660.exe
Size

45KB
MD5

6308a0ea080a7fb65014ec6e633ff660
SHA1

869f4adc028d8ede494767c18dfeb2e0c0c75703
SHA256

9ce7f3752357afd4071b3dbacbe70b5206e37450a6aa889612f80e89f15b2f36
SHA512

50efa76001df136149ac28296fa4d6665b0f9cd32b73560ff9166a70bbc94ce4820f6accfa8c47108e5d55ee4750cf4cb1f47e5a8adcddc87b1634acb64e34d7
SSDEEP

768:Erzhj/5eKqomyxJbf/matTZVPg+ZUdrmUZKVoxrsEB:EZjReKqomyD/matTZVPg+ZUdrmUZKVyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6308a0ea080a7fb65014ec6e633ff660.exe

Files

NEAS.6308a0ea080a7fb65014ec6e633ff660.exe
.exe windows:4 windows x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE