NEAS[.]27472bb95860ef855f36bbb751e5de60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.27472bb95860ef855f36bbb751e5de60.exe
Size

24KB
MD5

27472bb95860ef855f36bbb751e5de60
SHA1

94c2ce05c1447b97bafd067d3d2af3bf6d15431d
SHA256

e97087cdd698734e39a00785b1ad6a9c4748d19dc4a765cc48af68fe0eb43b45
SHA512

caa674660af4999785c9f77b2e91c12ecb2a0e714fe8fd3cca6b0a03616537113bc514e1f53bb2205a78e420b27b2430cd098aee46eed67b95ce5585d97fb831
SSDEEP

384:0KekfQuyQDpHD76M9ebkMP+OijAA4cOYWO6O9OcNuynm+Owe237eLFVq:0KH9ygD6gO5ONA+Owe2r+Vq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.27472bb95860ef855f36bbb751e5de60.exe

Files

NEAS.27472bb95860ef855f36bbb751e5de60.exe
.exe windows:4 windows x86

ec971185e01d68e258e7b930b703ef9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
GetDlgItem
EndDialog
SetWindowTextA
SetFocus
DialogBoxParamA
CharUpperW
SendMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
GetMessageA
CharNextA
CharPrevA
CheckRadioButton
GetWindowTextA
GetWindowRect
GetDlgItemTextA

kernel32

CloseHandle
VirtualAlloc
GetModuleHandleA

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ