NEAS[.]d38b047078e818eb8d2c10378263deb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d38b047078e818eb8d2c10378263deb0.exe
Size

34KB
MD5

d38b047078e818eb8d2c10378263deb0
SHA1

1a1bce0fddd0751409a6ea0e1b92b8fae24bec83
SHA256

3a49f8f332f8e1e153e6dd9b00270da99a4cfdb6bb9c4a15877fca39b9cf4a5d
SHA512

c2d31f06671ae128be3e07862ee66f8d2498aa19a99f246d7a16fd63ffaaf3024e7222fd0ce68a7d32e20f53cd3a7fc2320d2ed7fa50a9854df4bdbfc6635b62
SSDEEP

384:/kfug6zwgQP4J3390scAVP9IhX7Q/alFg+7NcCsiSf1iW3wKj394mkT:cXYGtuGh55BxSdtwmej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d38b047078e818eb8d2c10378263deb0.exe

Files

NEAS.d38b047078e818eb8d2c10378263deb0.exe
.exe windows:4 windows x86

cf17f374bd7a8f43d6e138239cb71808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
PostMessageA
MessageBoxA
EndDialog
GetDlgItem
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
SendMessageA
DestroyMenu

kernel32

GetModuleHandleA
CloseHandle
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ