NEAS[.]6d8d3ad39da7d339054b8fad90dc9b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6d8d3ad39da7d339054b8fad90dc9b40.exe
Size

82KB
MD5

6d8d3ad39da7d339054b8fad90dc9b40
SHA1

7ed1db34d257b2490eb5e842fb62f190fc8bbd8a
SHA256

22c98857d1912081e5d93de187665a4c243fcb64e889bb281c404cf6973dc883
SHA512

166bd8a62727716fff0ec37714b20abaa0722f7003e1edb9208c18d4b49c9be46ad96f836fd9f94680994c4fa5cdb93288c5c1b8d0aab1d8c545228686c06576
SSDEEP

1536:4t+HtRYPACkvkqwYXaMcbITip4Yy8sTAmmrGHO4Of65D:U+NRwik/YXmbITiZy8Q8KuP65D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6d8d3ad39da7d339054b8fad90dc9b40.exe

Files

NEAS.6d8d3ad39da7d339054b8fad90dc9b40.exe
.dll windows:4 windows x86

b96b639f52dff14def6712ac96ccfd18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EnableScrollBar
EmptyClipboard
DrawIcon
DispatchMessageA
DestroyWindow
CharToOemBuffA

kernel32

FlushFileBuffers
lstrcpyA
lstrcmpiA
Sleep
SetLastError
LoadLibraryA
GetVersion
CompareStringA
EnterCriticalSection
EnumResourceTypesA
FindResourceA
FreeResource
GetDateFormatA
GetFileSize
GetModuleHandleA

Exports

Exports

sityp
sitypnow

Sections

.text
Size: 15KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ