NEAS[.]d3059205d13ceb17c5b0c32691c85820[.]exe | Triage

Sharing

General

Target

NEAS.d3059205d13ceb17c5b0c32691c85820.exe
Size

3KB
MD5

d3059205d13ceb17c5b0c32691c85820
SHA1

1f4daccc14627cbce5f5c234ec3471a95bcd18f6
SHA256

e5907a6c8519723c9c1656627790467b3388dd7d777e28467003180bf902198b
SHA512

50d772cfaef26768670070ed5f18fc438f350cf3014adf5175a6bc1eabadaae6ee3b9ccba4de8435abdd1776842115dc27d98ab8c1b105b65f3ba530f576e648

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d3059205d13ceb17c5b0c32691c85820.exe

Files

NEAS.d3059205d13ceb17c5b0c32691c85820.exe
.dll windows:4 windows x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ