NEAS[.]badd7ee250a8d99f6f2eff09867175a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.badd7ee250a8d99f6f2eff09867175a0.exe
Size

41KB
MD5

badd7ee250a8d99f6f2eff09867175a0
SHA1

0b443a8782eff6c5cb8638a0d342dffccd3d682a
SHA256

389c802185d48f17df37ae41634dd8ffeb9a403953a8467eaa8e159f7cb0e7e2
SHA512

425cf4e287f32bc8631eabcbea6662dedda74d7de78a24c5fe49790ef2fa84cdcf4002ae80ed00a462c517b898f46230ca8292422e4e17776d5f7a4e304bfc56
SSDEEP

384:u+UuN1kg7x9WHkYK5t24pttObGwl+Yq2M+cn5zI638GkznJCgbYsq+rULUIjgH51:euN+gX55V7gbGy++cnk3Z1FCgq/gFBm8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.badd7ee250a8d99f6f2eff09867175a0.exe

Files

NEAS.badd7ee250a8d99f6f2eff09867175a0.exe
.exe windows:5 windows x86

1ff5f432434633aab8fc15061ce55a13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ