NEAS[.]894246e700b25f791fb392fd92beb620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.894246e700b25f791fb392fd92beb620.exe
Size

29KB
MD5

894246e700b25f791fb392fd92beb620
SHA1

0b0eb82ae8034c54aebec07c1b1200c31c1bcea9
SHA256

b9c21685fd04ffb9cdfd33cb188b86775a7a730102056b3f08ff3bd5ef80b7d5
SHA512

cd3d8acd58b1eca84ca84b30729b6f43e467650ffac488c96a8d248d6a26bcc90cceb5e596eeca224ac5252558f54db5ea9e461d6ecb5fc4d2f44824c42a75f8
SSDEEP

384:BJBcQ3oQ/jeO6Rj2cKfbKyVtGqJ06MDq0VYUxhOUNp:1cqoGjeO6RjnyjohXxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.894246e700b25f791fb392fd92beb620.exe

Files

NEAS.894246e700b25f791fb392fd92beb620.exe
.exe windows:5 windows x86

f262c30f75af1da928aa18962955a131

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
MessageBoxA
GetMessageA
DefWindowProcA
GetClientRect
EndPaint
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
UpdateWindow
SendMessageA
DestroyWindow
LoadIconA
ShowWindow
LoadCursorA

kernel32

GetComputerNameA
CreateFileA
GetLastError
GetModuleHandleA
GetCommandLineA
GetTickCount
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteObject

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ