6c6b5cd2809ec7ea33502fff1c65fdb0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c6b5cd2809ec7ea33502fff1c65fdb0_NEAS
Size

74KB
MD5

6c6b5cd2809ec7ea33502fff1c65fdb0
SHA1

3aaa978f42539399a30509720791c4e9c8f6f6a9
SHA256

597deabc17c3b154b9d3f4ee9873ee701f232e9da6f40cd19308e831b55f60b5
SHA512

8437555d884046d14d7c1fef8d2f5fc36e971a49e26da116da8d9a08fee1133a2ededfa59cfd228ae2f4c3b147cc2af22bbbbe5612f569150926c7bf40451705
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2DV:uF+LCofRLCgxSzXo8CgpIo53u2DV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6c6b5cd2809ec7ea33502fff1c65fdb0_NEAS

Files

6c6b5cd2809ec7ea33502fff1c65fdb0_NEAS
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE