d5dc383a84f7c6687fc18a2e0e93ca60_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5dc383a84f7c6687fc18a2e0e93ca60_NEAS
Size

72KB
MD5

d5dc383a84f7c6687fc18a2e0e93ca60
SHA1

5dab54d3a4008bd75547dec6a327910e3562166b
SHA256

083a29f1946655bbbb02eea1e8be509c9df43bc6602e1a8c7bd01c0077018f76
SHA512

3dec059d4ba9ee7890eb0fb3d7cd8a79f0bb1a181c61a31dc3bc3d620dbbcc9cb67b5d95b128d464ef29864e580ddccc0fcc2d29d3bbd733a0516d9b8730413e
SSDEEP

1536:xv/Gn6G8eQuC9PLb8okGNnZsq9xnIP3wlrFPCy5SfR+6S/fd7eZGWK5MOP:x/hNpLzN9nIPWFPCKt/Jh5zP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5dc383a84f7c6687fc18a2e0e93ca60_NEAS

Files

d5dc383a84f7c6687fc18a2e0e93ca60_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE