NEAS[.]fba664e6baf6990097134d5bf2c12100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fba664e6baf6990097134d5bf2c12100.exe
Size

57KB
MD5

fba664e6baf6990097134d5bf2c12100
SHA1

e348b5208e17669865a28164cab3908e368506d8
SHA256

c47449b132ce98abf40622f12b08da28fc10fe783a3757699f4acb4a220fd5a5
SHA512

2670db2c4190337d23694953802a96bfb5d86e59045185d0f7fd7de6a73339ca5333ff467a9e20c2108b389a6cd13d5e2b3169574834bd2f17f3ddef23bd603a
SSDEEP

768:7I4DD+LzjPsED3VK2+ZtyOjgO4r9vFAg2rqnpd2GRY:71DD+LzjYTjipvF2zD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fba664e6baf6990097134d5bf2c12100.exe

Files

NEAS.fba664e6baf6990097134d5bf2c12100.exe
.exe windows:5 windows x86

cd48d697fbee261c31a3b590f5e52ef1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetScrollInfo
PostMessageA
DialogBoxParamA
SendMessageA
SetWindowTextA
TranslateMessage
DispatchMessageA
GetMessageA
EndDialog
GetDlgItem
ScrollWindow
DestroyCursor
CharLowerA
ShowCursor
MessageBoxA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA

comctl32

InitCommonControlsEx

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ