NEAS[.]a37fede92c52425eeaab5da8dc702090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a37fede92c52425eeaab5da8dc702090.exe
Size

38KB
MD5

a37fede92c52425eeaab5da8dc702090
SHA1

5033083f42c5539b7ea7526553ef61510a55e4c7
SHA256

1288083acc2b0f697c8536a69156a8ce82a0bd9a11c089c22c7b7b021e36ef8b
SHA512

3a636d7054aa574d8f019ace20413a4676d42b90ad14bc7305c64459271fada036111762f3d4fb759f006856ab2f10e6bd13eb899ef53742dcf7fb87d680bc41
SSDEEP

768:hkMDwAgjZgvCngjgPPotdgI2MyzNORQtOflIwoHNV2XBFV7JBDld7ZsBGWdaFWe7:9kAgjZeCgjvtdgI2MyzNORQtOflIwoHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a37fede92c52425eeaab5da8dc702090.exe

Files

NEAS.a37fede92c52425eeaab5da8dc702090.exe
.exe windows:5 windows x86

4af8dba28c3f384f880ddf5626b0fb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
DispatchMessageA
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindClose
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ