NEAS[.]db3e3a17124be939b273a32481d5b670[.]exe | Triage

Sharing

General

Target

NEAS.db3e3a17124be939b273a32481d5b670.exe
Size

55KB
MD5

db3e3a17124be939b273a32481d5b670
SHA1

5e37349a799a49a436f22b1385b2669f31850778
SHA256

8f1ea5eaac2f38491a40dc6356361952f9aa3346f498730de90be3ab9d6beec5
SHA512

4c90d7a6b154ce23f648464416128ca5d1892d221010808566f467f6bedc54ddbe7653a2a79c9d769430eee84e3f9b3afd6a8ce4dec4243545f36e95ad4c8001
SSDEEP

1536:MncPoTPcYDN3b7h5/l9yq6Gqtm5NCYyi40n:McPsceNruqtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.db3e3a17124be939b273a32481d5b670.exe

Files

NEAS.db3e3a17124be939b273a32481d5b670.exe
.exe windows:4 windows x86

7bf949ab44a3cf9f0993f4b5d8416436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
DestroyWindow
SendMessageA
EndDialog
PostMessageA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DialogBoxParamA
DispatchMessageA

kernel32

GetProcessHeap
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentDirectoryA
lstrlenA
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
WriteProcessMemory
GetFileAttributesExA
DeviceIoControl
IsValidCodePage
SetEnvironmentVariableA
HeapAlloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ