NEAS[.]85541459c1b375abcfdb103a41abe6c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.85541459c1b375abcfdb103a41abe6c0.exe
Size

35KB
MD5

85541459c1b375abcfdb103a41abe6c0
SHA1

3a091b7aafab60f44a7cfad6a6ec11381cc5de90
SHA256

009cb93897c2b1774b67597968f257e7457059ed6322a71f4835afa8f9f1a512
SHA512

ff235941a79f3ac5c9ebac9ca54efdc88bd1072e2f5125b1e304e7555b1c5b65538d14ce5999b2a5947a15b59c8b9313bb998bbf6648989319b3ccba955fb50e
SSDEEP

768:hkMDwAgjZgvCngjgPPotdgI2MyzNORQtOflIwoHNV2XBFV7JBDld7ZsBGWdaFrzW:9kAgjZeCgjvtdgI2MyzNORQtOflIwoHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.85541459c1b375abcfdb103a41abe6c0.exe

Files

NEAS.85541459c1b375abcfdb103a41abe6c0.exe
.exe windows:5 windows x86

4af8dba28c3f384f880ddf5626b0fb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
DispatchMessageA
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindClose
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ