NEAS[.]bc58f44bb41e555fa993555551270fb0[.]exe | Triage

Sharing

General

Target

NEAS.bc58f44bb41e555fa993555551270fb0.exe
Size

101KB
MD5

bc58f44bb41e555fa993555551270fb0
SHA1

40eecfe8bbcfae03a2ede474536c5075045c025f
SHA256

261d975884bb011be5302108f899373fc28f9ed1d54b1d9ad157f69f81c3276a
SHA512

ff5b3972e72f35262937a817f1fc98f36829d910827e66fdaa81f84a5abfb6150eb5b3b9b49fde3d29c3052664982605e56cff89143c1a7681235dc383de1aef
SSDEEP

3072:lyuRpu9fWWq5g7Hbu5JcrtSwlT2vS67Vz4:lV75SrtSk6Rz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bc58f44bb41e555fa993555551270fb0.exe

Files

NEAS.bc58f44bb41e555fa993555551270fb0.exe
.exe windows:5 windows x86

745580b19322f01706d82a92e2b8719f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
DispatchMessageA
CreateWindowExA
EnumWindows
GetMessageA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
EndPaint

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ