NEAS[.]6cf8fffc8f790af36c97553970985760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6cf8fffc8f790af36c97553970985760.exe
Size

28KB
MD5

6cf8fffc8f790af36c97553970985760
SHA1

d36dfb3c36f3b96279d38c09703cee552dbcc0a3
SHA256

20088b617fc60203accf79f26840993ac9996e2a0363685a4c2394752dd80d4a
SHA512

1e56b0b389c90c5bfa9e0d847493698f8a6a4f04d396a8c8bda091c201ff04d615ca996a25af7cb513951e76635ece2c4dac52f68674e7cac4bc3136247c1961
SSDEEP

384:gzg+XE+YkCkSbBUAch1A9NB/erdVeErA//dJbqLOMuL2O:AXE+YkCTqAs1FdJr15uiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6cf8fffc8f790af36c97553970985760.exe

Files

NEAS.6cf8fffc8f790af36c97553970985760.exe
.exe windows:4 windows x86

02aafaecc781c6631cc1af6459a7af40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetDlgItem
wsprintfA
MessageBoxA
ClientToScreen
CreateWindowExA
DialogBoxIndirectParamA

kernel32

GetFileSize
CloseHandle
CreateFileA

comctl32

ImageList_Create

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE