NEAS[.]da14dddb38985169062710485833a690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.da14dddb38985169062710485833a690.exe
Size

111KB
MD5

da14dddb38985169062710485833a690
SHA1

fde1054d6f1491fe84661c394c455dfd197a2327
SHA256

216e0ce6051a1e3bec889de3aa073537fbca1a98dc1f83ab51872606b224e9b3
SHA512

bb9c17a9e4446b22b3dfed1a7c1e1c7b54981372eab628cc2cd873d8efb22a8624601f77788d8aabb5c04d45e1810cd7a0ddae70d9bb9dbcb119ed9dff14b8ce
SSDEEP

3072:nmfIBxfmeZcvoNp04qqZ0Xjv7eECCLLhQndPwk/qB:nFPOeZDfZ0Tf9LhQnOkiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.da14dddb38985169062710485833a690.exe

Files

NEAS.da14dddb38985169062710485833a690.exe
.dll windows:4 windows x86

db2755f409b81c4dbfc04f648cfb80b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread

user32

IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects

Exports

Exports

CallAndWait

Sections

.text
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE