NEAS[.]2a796cea08f74c4926faad08fba97f00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a796cea08f74c4926faad08fba97f00.exe
Size

28KB
MD5

2a796cea08f74c4926faad08fba97f00
SHA1

3c36b7a9d76912b08f9119c28a28d39a21997790
SHA256

995756e5dae8a505b44d6ac2b386bda4bfe6a383c92a04c3f627b61bd491c206
SHA512

0b929b199436a9bd9bd41c173e686c26ac66215cc940fd1a16b845c384a31e09946fdefca47657e6b2ea691c75b02799a853bb46e189889e0b1cd4792f439de2
SSDEEP

384:swg9a+fFSwgE+9XgW6IfuHvLjdOjCdMitI5fuBppENm3qLxQl8HSX3:swg9aYfQkXdmCdMimsENm4QF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a796cea08f74c4926faad08fba97f00.exe

Files

NEAS.2a796cea08f74c4926faad08fba97f00.exe
.exe windows:5 windows x86

40cfd28337d574135a64316bfef4f77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateSemaphoreA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
LoadCursorA
RegisterClassA

winmm

mciSendStringA

msacm32

acmStreamOpen

Sections

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 983B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ