NEAS[.]bd737a3a84b1160dc911f4788b44fc40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bd737a3a84b1160dc911f4788b44fc40.exe
Size

45KB
MD5

bd737a3a84b1160dc911f4788b44fc40
SHA1

74774317e56d3329c377ec7bdd72f4ee4249abbc
SHA256

664ae10e5467ecc5862d3734ebeeeae6455d5b5577d1c6442c7bd8bca10a6ba6
SHA512

52e567d19bef83c6e261c0a310522d4239917c96c918afb7ea58019fd0ba71f320060b32c06c096d9d4430814c44a7c943b406a96a8aceda1e7bdf77f14214b0
SSDEEP

768:yq2H2dH1gdFz2HT0felqWppHDV0pDpSAD8dMdz:iu1gdFs0Wlq8DJAD2Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bd737a3a84b1160dc911f4788b44fc40.exe

Files

NEAS.bd737a3a84b1160dc911f4788b44fc40.exe
.exe windows:4 windows x86

db5fd9e8315faca9ea5a8b8724a5c081

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
SendMessageA
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
LoadIconA
RegisterClassExA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

kernel32

lstrcpyA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetCurrentDirectoryA
FormatMessageA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetCPInfo
LoadLibraryA
GetModuleHandleA
GetProcessHeap

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ