NEAS[.]fcf95f6a875b057a2874aeeb7025fc10[.]exe | Triage

Sharing

General

Target

NEAS.fcf95f6a875b057a2874aeeb7025fc10.exe
Size

20KB
MD5

fcf95f6a875b057a2874aeeb7025fc10
SHA1

ea00f443f761b218f8615f5b840d205a7eb7cc06
SHA256

ade35dcea692669d4934b8729d7ac50054528f0c4a4c6f8e5f320f74068c54b7
SHA512

09b4f2e24cc524b14bf2d0ba3686f4a75238e1e06eef942c980feb293a2176f7c620d4c285bca446f47d8b0042ad1b30d83059efc5ba1204a0459a703a60300f
SSDEEP

384:jIz4bOZi3Wb/bSHIP/7bBFzuc+u2qLQ26/PBaVuyHHUy/0kF1r:jIUbOMmbjSe/JFzeqLoPcAyHHYkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fcf95f6a875b057a2874aeeb7025fc10.exe

Files

NEAS.fcf95f6a875b057a2874aeeb7025fc10.exe
.exe windows:4 windows x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE