NEAS[.]656edb6e277395097d6b651076a1d430[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.656edb6e277395097d6b651076a1d430.exe
Size

180KB
MD5

656edb6e277395097d6b651076a1d430
SHA1

4729082870b84e432b31e2e14967da1b7e255b94
SHA256

6c85e827699e85029f7ab1eb1149a3db8d5a27a0aa17d6fd253b86d0b5dfcab4
SHA512

7f176c7ae3775a30c38bd7b4381de003be65850c6befd7b0ecd3f52ee4ad4f949f4d57ebd04f974a69dfa9f9632d680eb6b721729da0999b384a02eaa09d9c54
SSDEEP

3072:u90Mssem0RGFXko4UDPELjWqdYJoRPBBDZhuE8LVn:vRsVx3gtTf5X18LVn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.656edb6e277395097d6b651076a1d430.exe

Files

NEAS.656edb6e277395097d6b651076a1d430.exe
.exe windows:5 windows x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ