b564a72f28db4b16f6f303ffe9a17c50_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b564a72f28db4b16f6f303ffe9a17c50_NEAS
Size

92KB
MD5

b564a72f28db4b16f6f303ffe9a17c50
SHA1

ffc5224452b3ff9afc542dbcb3428509d39419c3
SHA256

9c57fdf86b0f958c054f463242455f913724af847d26fa4c04d3381780d5e296
SHA512

a50f850925fa604892954664674a78972bd10f9a7deafd52e1b58b0560da3ea1884c4512c907fe2a300db9f65d506c03ddca925f3fb38448521237d0229560ce
SSDEEP

1536:d6cBghuhWC82dODRKE0+wrrCMpANi8tGtZ83YacIyP/69QAq0Gb8/Z5H83oKz:UcBgeHNddE0/rutN0KYBbWq0GQP0oKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b564a72f28db4b16f6f303ffe9a17c50_NEAS

Files

b564a72f28db4b16f6f303ffe9a17c50_NEAS
.exe windows:4 windows x86 arch:x86

7be9642300c5eb8fe19f2ff6e9531d45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertCalDateTimeToSystemTime
ReleaseMutexWhenCallbackReturns
CreateFileMappingA
FindCloseChangeNotification
WriteTapemark
SetVolumeLabelW
GetShortPathNameA
InterlockedPopEntrySList
BaseGetNamedObjectDirectory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE