NEAS[.]8ec4f5cfab76160e5b25e5a769b7ce50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ec4f5cfab76160e5b25e5a769b7ce50.exe
Size

6KB
MD5

8ec4f5cfab76160e5b25e5a769b7ce50
SHA1

d7a2dbf82282e8fe4dda34b66de6d4cb36e641b8
SHA256

f5b2905367b1a0329aab748883ac86dd1fae88c92ee22e8f6a6a4eed71fc27de
SHA512

5e6597da3844ddf36927e3ed1c060912701c340bae278fbc13590e987fbd0ee571d33a07b1117fdb19d5d0214ea1d003127520c65433e58944459b6c15606e64
SSDEEP

48:6O6Osw0q9N5l9kWk/3OMx+/wBp+nZTnbtvn4Kg7s:rVNla7/eZY3+nZTnbtvn4Kw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ec4f5cfab76160e5b25e5a769b7ce50.exe

Files

NEAS.8ec4f5cfab76160e5b25e5a769b7ce50.exe
.exe windows:4 windows x86

bfe307af3ff09d4684f8012ce37387aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
FindWindowA
GetMessageA
LoadCursorA
LoadIconA
DefWindowProcA
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
CreateWindowExA
PostQuitMessage

kernel32

ExitProcess
GetModuleHandleA

Sections

.text
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ