NEAS[.]7836aee93c4dcf43a2030c63b7f17b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7836aee93c4dcf43a2030c63b7f17b40.exe
Size

39KB
MD5

7836aee93c4dcf43a2030c63b7f17b40
SHA1

ec03102ceb7bb9b9702a1c0fd4b8647641161005
SHA256

e8212b050d89560ac706a25585c9ab322c9b46a29913cb811129457c1cefbd58
SHA512

ed90cc852e62f1a8ad3798f83bc0725c8aefa5122ebea610a4d6d7c6818a4926a39ea4629b33137ffb10f55a73b298dfecaa2502152e5d2c673e45e0a99c7a6b
SSDEEP

384:u+UuN1kg7x9WHkYK5t24pttObGwl+Yq2M+cn5zI638GkznJCgbYsq+rULUIjgHb3:euN+gX55V7gbGy++cnk3Z1FCg720

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7836aee93c4dcf43a2030c63b7f17b40.exe

Files

NEAS.7836aee93c4dcf43a2030c63b7f17b40.exe
.exe windows:5 windows x86

1ff5f432434633aab8fc15061ce55a13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ