NEAS[.]47d1261ec6bc3d8ff8403be46bf4fa10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.47d1261ec6bc3d8ff8403be46bf4fa10.exe
Size

25KB
MD5

47d1261ec6bc3d8ff8403be46bf4fa10
SHA1

f645fdfcabd6ee8b155564d9c9ae877a6bf92e90
SHA256

24ece3bc3d1d1c14faf2004a590c720add1af0de2e8d0bad93f7d8557f1561cb
SHA512

ab52ef29a521cc697c2e1b82e9ceef029fc0aacce70e7ff3e4f5692237cff8ac5dc343df0ea3767d33b8757f5b6a935b2157970f9270fa67ed0540b82deb59fa
SSDEEP

384:uzP7cQB1sgKWt0R+DB295BdenlYD/DhaxaUJsHK/7W:uzP4BgDt3DXlE/g4Qsq/7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.47d1261ec6bc3d8ff8403be46bf4fa10.exe

Files

NEAS.47d1261ec6bc3d8ff8403be46bf4fa10.exe
.exe windows:4 windows x86

bd7b859f05f0a6fc90edae991f7ebd76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamW
GetDlgItem
RegisterClassExW
CreateWindowExW
GetCursorPos
MessageBoxW
ShowWindow
UpdateWindow
DestroyCursor
CreateCursor
SendMessageW
ShowCursor

kernel32

CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ