af3e323a34638a402fa7203273f83c40_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af3e323a34638a402fa7203273f83c40_NEAS
Size

119KB
MD5

af3e323a34638a402fa7203273f83c40
SHA1

34ae7939d59b7c1d2926222cfdaf0f5af04793a2
SHA256

27236411f05f960d33bcc6be3597f87b93d8656bd56a4bd244f54807a66f1823
SHA512

a5c3bbe21fae0a2460b9b91489184ea2e879803058f43732e9ca9b247ff23c707d4da05110afe9e5d3fe9b0d61f16c772f690a1686fab887a8b57c2b2ec0598f
SSDEEP

1536:uiFfJ/oxQPpJY7ETHTbx1Mauq65q/qWkcFIpjVrs2ryrd1vUQuqSSqK5tnCvv:HppJYErPkr5q/jFIHs2qxnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af3e323a34638a402fa7203273f83c40_NEAS

Files

af3e323a34638a402fa7203273f83c40_NEAS
.exe windows:4 windows x86 arch:x86

8e6e8537cc9a57ddfd3f7804d5cd7cfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ProcessIdToSessionId
DosDateTimeToFileTime
MoveFileExW
CloseConsoleHandle
GetUserGeoID
GetNumberOfConsoleInputEvents
GetSystemTimeAsFileTime
CopyFileA
GetNamedPipeHandleStateA
WaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE