377e71861040b11488330245aa8f7350_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

377e71861040b11488330245aa8f7350_NEAS
Size

92KB
MD5

377e71861040b11488330245aa8f7350
SHA1

7ff51ca8f2dad5b228bf30a71ee820842a5ae643
SHA256

4fb3169475b1d7285d9fd211eca1d9fbc016a916e86b22f0d6380804fdc701e7
SHA512

da71604b98ed5f52bd1ce8af933c6fc58afc3b66c7a270d04c23127330d411e698c55a94c9f561588c515781eaeeae5cabdeccc830687eee10e4ffc958ff0bc7
SSDEEP

1536:VyOpRWAnelmVyFAr0BoxdE5z+uDXdV2KjabpbtVEEEEEBAEEEEEBBEEEEEBVcHw6:VyD9wpx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
377e71861040b11488330245aa8f7350_NEAS

Files

377e71861040b11488330245aa8f7350_NEAS
.exe windows:4 windows x86 arch:x86

af399eb2e84e710e478920914b944b02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
ExitProcess
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ