60c0c549c861cf6944930e715ab66360_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60c0c549c861cf6944930e715ab66360_NEAS
Size

46KB
MD5

60c0c549c861cf6944930e715ab66360
SHA1

f141c5dc91cfdd92a82feffc847dabe37a50937f
SHA256

4814527b2e2da04f1b500363ce930661d667b7f0b1839e765dcfa1e6cb6ae7a2
SHA512

a2b3eafaf3c90f060477da81efbdf4b87a415e70cb6f3547501b31ef19c5c9c6abedc994b41a62b4c2456060dc3f256c25972661f91ea443cb1f283976d11928
SSDEEP

768:jIU3pKDiX7BvFOWTkaynH+ER06JryAGUgqC8SUxKCu:jf7FFHQ/H+GcR8xKCu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c0c549c861cf6944930e715ab66360_NEAS

Files

60c0c549c861cf6944930e715ab66360_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE