4f465df710fe04b593791b9806bcde10_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f465df710fe04b593791b9806bcde10_NEAS
Size

24KB
MD5

4f465df710fe04b593791b9806bcde10
SHA1

1895aeff51387c98544ae9d4ac404a56d8ed483f
SHA256

32ef5f68999cf8a3131ad8f69d90ade788d50fde094daefd8118a38785eee280
SHA512

60265bae8cbdfc8b228eebe59fefd35cef179c7c5d2a975f569925374bc79edcb4044d271fe66d68d095a1351d3b39d24f949dd218eeaaeac03b88301c71a9a8
SSDEEP

768:jIUsDgmY0IPnof/PHfSlB/4e9EyS04DYndlFttzHry6:j6DgF07nHf2B/t9Eb8Zrry6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f465df710fe04b593791b9806bcde10_NEAS

Files

4f465df710fe04b593791b9806bcde10_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE