3a2f38368fbf96d52a1adf6efb3e97d0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a2f38368fbf96d52a1adf6efb3e97d0_NEAS
Size

63KB
MD5

3a2f38368fbf96d52a1adf6efb3e97d0
SHA1

78a2a30c69a75a6eee32d4e3a5a12d1bc9c4c090
SHA256

405d834dc16b52075e91b5f194668e6784b5697cd3f38b92ae7b7e1e9a10a398
SHA512

a7f0d102263a0f57b9b7cf5b5ca1b1861f697cdbcb97ae07e3f338cc42f8cc9b481dbdeb3f534fa2d217d666e216ef2cff5cd96db1abd8120ade28d923a41c97
SSDEEP

1536:tAiMxQZir3y7aQeOgYyjdumnxm0V9rOB0NuyWhib5:yinEriJeOgYyjd5A0/kuKhs5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a2f38368fbf96d52a1adf6efb3e97d0_NEAS

Files

3a2f38368fbf96d52a1adf6efb3e97d0_NEAS
.exe windows:4 windows x86 arch:x86

bd13f3043a35d2ed8c11df702f7c96d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EncodeSystemPointer
GetPrivateProfileSectionW
InterlockedFlushSList
RegSaveKeyExW
K32EnumPageFilesW
RegOpenCurrentUser
WerRegisterFile
CreateNamedPipeW
GetCalendarMonthsInYear
WriteConsoleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE