NEAS[.]f4813a898a7438e50c466d0ab1b55fd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f4813a898a7438e50c466d0ab1b55fd0.exe
Size

20KB
MD5

f4813a898a7438e50c466d0ab1b55fd0
SHA1

45be19e10323dbc2a16426bb504d82dadad1b163
SHA256

a1efef395fe490b73b6d3c9277364ba2527abbc18162fdd9215b534b85a45ec0
SHA512

e52f6e81d0a876df51a28aed2edbb431b2af55c2349ef2279451bf08491e8d8fff6e23d5161300f3086d52f102b514f1bf435c5b2ee32d327eb6bfcaa8a9e3b2
SSDEEP

384:jIz433+w/oFZtISm3hPkpDPw5Sxbsq5yrxu0K+FMwZgeU5F:jIU335AF3e3hPkpESxbT400NF7AF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f4813a898a7438e50c466d0ab1b55fd0.exe

Files

NEAS.f4813a898a7438e50c466d0ab1b55fd0.exe
.exe windows:4 windows x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE