3063a18ce052a1869527b59db97df0c0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3063a18ce052a1869527b59db97df0c0_NEAS
Size

73KB
MD5

3063a18ce052a1869527b59db97df0c0
SHA1

54c3193ff6f4288f2a2a48944fa77a6fc15e07b6
SHA256

fdf46def816aa8e7525f1af2080a818bbf4a250b2886893cf7614c6119e378c5
SHA512

490db8a2e699a29d2ed6992a79ce4d38ce957a92946156c7c73f5fab7e58d913491ebab423e46efe446bda522312df75c7a58d694d93bf4bf7fd46eee75c25c3
SSDEEP

1536:1O5uTRwOmEbRd3vHiIYTJWo9KxwO+N2tbZg0grsIhASwcQ:A5u1wOmqd3vHi8o9KiOAkg0gsII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3063a18ce052a1869527b59db97df0c0_NEAS

Files

3063a18ce052a1869527b59db97df0c0_NEAS
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE