NEAS[.]b5cbf978ef9041b4bcc7cbe03d05b360[.]exe | Triage

Sharing

General

Target

NEAS.b5cbf978ef9041b4bcc7cbe03d05b360.exe
Size

265KB
MD5

b5cbf978ef9041b4bcc7cbe03d05b360
SHA1

388fab9952aab21bba9589f347b8fda074605b95
SHA256

6bef175fc34ca9205a261467ee55c779f9cbbcb326e28dcd128acedfa380abb6
SHA512

281f9b2c3f281da35066d9f382988965a5acf168b3545a2d6193bdfffb8c2d595b2c6f11f692e9dc49afe0e8cc81ff02578c488604ffc2f5646eee1812609827
SSDEEP

3072:JwMUB2DfUGybDBuhN+K1pBJs2o/LrGKU5p29qFwMNM7YfaJwH5wEDoz5kU5PB:JbnybDBuhN+qpBKnGKUeceMmhEW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5cbf978ef9041b4bcc7cbe03d05b360.exe

Files

NEAS.b5cbf978ef9041b4bcc7cbe03d05b360.exe
.exe windows:4 windows x86

6555803adfd8196e439b6655d1791942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
SendMessageW
GetDlgItem
ShowWindow
UpdateWindow
DialogBoxIndirectParamW
DestroyCursor
CreateCursor
MessageBoxW
ShowCursor

kernel32

CreateFileW
CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ