91c0fc6b9953abb1d6bd3341bd9e3a90_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91c0fc6b9953abb1d6bd3341bd9e3a90_NEAS
Size

24KB
MD5

91c0fc6b9953abb1d6bd3341bd9e3a90
SHA1

9e2ab890b88daa9c97b74a9673d962c665914c52
SHA256

fc5f982276e5bb7040db604d0c6a4997b2b5d5cfa67a543e3ab1442313f003ad
SHA512

f27f4c8005b30c9a7d537c5b894995a41a2dc1c25f3537d90d7e43c80f7f8e1d90cc9636509ffbec641ee16c6bf82c723cad3bebdd14a251d8f4cd10a81262e3
SSDEEP

768:jIUmz0bJ6AszzpmqxdfR2YU+ddwVLDmzdR:jEz2y39rfRnZIZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91c0fc6b9953abb1d6bd3341bd9e3a90_NEAS

Files

91c0fc6b9953abb1d6bd3341bd9e3a90_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE