d85d5be7494d6421a1cf21f64c938b90_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d85d5be7494d6421a1cf21f64c938b90_NEAS
Size

72KB
MD5

d85d5be7494d6421a1cf21f64c938b90
SHA1

acef6f10766b8f6dbdb4a7dddaa8fa11506c0562
SHA256

6f6f28f128f8f3ff834cbab1fac4e214e7bd2bb52a9229a49d83dc63b5d08c1c
SHA512

b4be389219271a075e447088ad33ae5aaf7d9135fca78bbb99f6b565bd1810db35133e60f002444a23338b32ca531e95c96dda5037afe3451a7e45efb1de3252
SSDEEP

1536:xGrOhMC7Nb20g6HKF02z5HKgeBGmW9aj9:wrOhRvN2sGmtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d85d5be7494d6421a1cf21f64c938b90_NEAS

Files

d85d5be7494d6421a1cf21f64c938b90_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE