NEAS[.]d89bb4d2ab634284ec69ed2f16a74f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d89bb4d2ab634284ec69ed2f16a74f60.exe
Size

36KB
MD5

d89bb4d2ab634284ec69ed2f16a74f60
SHA1

608fbd50848782fbfddfcd3c03d40dd8576dd173
SHA256

8c8ca5d8c0cb8b7a017f1ba4188178cd64f2db1010d18a9b737e32bc40584fb3
SHA512

569c7ea8ff91291deb3f90b142e64bf5c8502467f93d8aa102dd42bea5a7d0da3c874429bbb1b2bbe331196a699785f050e360a8761f7a1bc46dd8d4e99f6288
SSDEEP

384:d/7HWFJ4a1oXAsOTMcMJEfQVXQNKN2NDX/3LoWOatcAr9JncAm9FNTVegk+fDh3h:dD2oV2AJblQRNLzFrSNTVebSaZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d89bb4d2ab634284ec69ed2f16a74f60.exe

Files

NEAS.d89bb4d2ab634284ec69ed2f16a74f60.exe
.exe windows:5 windows x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ