NEAS[.]fd14cca47afdeea8e7e966d4de59de90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fd14cca47afdeea8e7e966d4de59de90.exe
Size

66KB
MD5

fd14cca47afdeea8e7e966d4de59de90
SHA1

415bb4256c6fc071671db364ad218a1ee7353024
SHA256

b656e9fd69192cdfb49c5d9e6da73cc406c2d9eaa8f3a77dec35255aec9635e1
SHA512

18967d6837bbee9a55c4a3e3a06c7691e1bd808773dee94f15e01fa1abfe15e2ec3a695446eb1ecf0a679e353198e395e4298db874679c6b64cd476c9cf22212
SSDEEP

768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUqI:w/e+mKFYTjipvF26cZ0L44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fd14cca47afdeea8e7e966d4de59de90.exe

Files

NEAS.fd14cca47afdeea8e7e966d4de59de90.exe
.exe windows:5 windows x86

28e46cf78fd543ccdc5071ec4c6c58bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

GetWindowOrgEx
SetWindowOrgEx
CreateDCA

kernel32

ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ