NEAS[.]77581ac7b6c8c697f86cdb518af5fcf0[.]exe | Triage

Sharing

General

Target

NEAS.77581ac7b6c8c697f86cdb518af5fcf0.exe
Size

32KB
MD5

77581ac7b6c8c697f86cdb518af5fcf0
SHA1

5d54b85054c89a6f13db6832bdc892599bf1f8ba
SHA256

342c93dddf88e93ee9159cddb2ab9b8fbbdcc92bf844eee0109823059a57ed4f
SHA512

787f889034cee03998ffcc9cb9bde0277679e9882df70983f6f64fde7cd1ff48b81d692135c730656bdd92e89f129f4e49000ada62026cbb528d82f42cc7f657
SSDEEP

384:bXvr/G9K/aASCjr8bfCmIyCl/wI0/1YTrfjkC7PshWCEpLlkuzwhW63Tyl3STj1T:b/zG9lCapIyMdnfj5PseRQW63GNSVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.77581ac7b6c8c697f86cdb518af5fcf0.exe

Files

NEAS.77581ac7b6c8c697f86cdb518af5fcf0.exe
.exe windows:4 windows x86

504411fa583b3c54342e6878c01d9e81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
GetMessageA
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ