NEAS[.]b5b41df00c084f82ddfe75414d987520[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b5b41df00c084f82ddfe75414d987520.exe
Size

37KB
MD5

b5b41df00c084f82ddfe75414d987520
SHA1

656ad38fb0e2d2f811dc969801d6ae86dc32b017
SHA256

2de779e02aae10cc1c08da79c2e512d6c8c77cf7edbc0b361fbfda4528827606
SHA512

ffb5a939e4a853b872c9a11cad40100304ae05f32aad51d5fa0a2fc509b0fc40ef90c46186a54533fc80db7bd678ad4e819f5ae8d8076d17fb7349244630362d
SSDEEP

768:C1IJDsyU6NCJkwKg3E1gsh32VtKTmsFXDoXSBUyCYgO:CEsocZ3E1gshmfOfFM5YgO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5b41df00c084f82ddfe75414d987520.exe

Files

NEAS.b5b41df00c084f82ddfe75414d987520.exe
.exe windows:4 windows x86

db24100d7b9342eca221a2a07083931a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
PostMessageA

kernel32

GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetExitCodeThread

gdi32

CreatePen
CreateFontIndirectA
BitBlt

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ