NEAS[.]6f9d0b5d0ed877c85d483b20f1a39eb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6f9d0b5d0ed877c85d483b20f1a39eb0.exe
Size

11KB
MD5

6f9d0b5d0ed877c85d483b20f1a39eb0
SHA1

bf7efb8b665a97bd2b35bf494fe865bfa034953e
SHA256

96c46b4b165752cf72a158e29718ef00112f4a34f6c137455de3c29b7e5cda30
SHA512

9d17e6e60bf5d4b9454e86e93962b9634e11c88c588d1571c784ec5b613d7fe72776eaa5eacacb86e4b38b2a6830276669990f062e956f29b6f6d2cd1a046525
SSDEEP

192:vGIMjPxMmtxpyuTduWMkrdE7dOS2WvB6W:vGIaVyeb99ZWZ6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6f9d0b5d0ed877c85d483b20f1a39eb0.exe

Files

NEAS.6f9d0b5d0ed877c85d483b20f1a39eb0.exe
.exe windows:5 windows x86

a25d4b9aa9c7efd2d8f84aee975e4c57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

CreateProcessW
GetModuleHandleA
GetCommandLineW
GetSystemDirectoryW
lstrcatW
CreateFileW
CloseHandle
FormatMessageW
lstrlenW
lstrcpyW
LocalFree
GetLastError
lstrcpynW
GetModuleHandleW

user32

GetWindowRect
ScreenToClient
DialogBoxParamW
SetWindowLongW
DestroyWindow
LoadStringW
wsprintfW
GetDlgItem
EndDialog
SetWindowPos
ShowWindow
EnableWindow
SetWindowTextW
SendDlgItemMessageW
LoadIconW
WaitForInputIdle
GetWindowLongW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ