02e75485d02af42d3cc719e339c01c10_NEAS | Triage

Sharing

General

Target

02e75485d02af42d3cc719e339c01c10_NEAS
Size

234KB
MD5

02e75485d02af42d3cc719e339c01c10
SHA1

134940c33131bfe2116dda1ca3bde4ade6a6d2e8
SHA256

eda65a68ef956b23df02666977bc32d3594f72a31f2502f783d2db31543f863b
SHA512

38fbdd84c65866ea33bdcc08b587cb533044440497c80f1e8c9aaf93eee3daf64ab75ef74cd9279bd5aed56069d3af2afa45e326bdc01fdfb33ec2d02fe4914c
SSDEEP

3072:14xfKbRbZ22mx7H3/6Ni82HN5wGTaCGG+dUj624DojTgg5p3V+colHyLCAGiNzKX:1lR1X2+w7GG0Ujd4OZrWHyGytKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e75485d02af42d3cc719e339c01c10_NEAS

Files

02e75485d02af42d3cc719e339c01c10_NEAS
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE