c0e3860f84fc8eb802d92cc4279cc8a0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0e3860f84fc8eb802d92cc4279cc8a0_NEAS
Size

119KB
MD5

c0e3860f84fc8eb802d92cc4279cc8a0
SHA1

ffc428bd80826f22e3681bfaab86f483b140a078
SHA256

867ee6064312286d42ed2c569e390d013537c083d08a4d169859d49d673fb06e
SHA512

9121c1a228bd6adccded3ddc45adb3dd7c0b22482928f7c4769062c031e95755fde41b082f667736837f446e85c00fe653292d85c5b4bce481062dc8358c965e
SSDEEP

3072:6g2Tz14m9PnA9aCvt5I2eW7ersbceNWZDS:6gq6APnA9RB7i4bCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e3860f84fc8eb802d92cc4279cc8a0_NEAS

Files

c0e3860f84fc8eb802d92cc4279cc8a0_NEAS
.exe windows:4 windows x86 arch:x86

370387c067a8c9afbf3d69ef84ca1957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualLock
SetVolumeMountPointW
SetThreadToken
CloseThreadpoolWait
HeapValidate
CreateWaitableTimerA
PssWalkMarkerGetPosition
BasepReleaseSxsCreateProcessUtilityStruct
IsSystemResumeAutomatic
GetPrivateProfileIntA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE