NEAS[.]cd2dc81bf4482fa6af081c7fb6129cd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cd2dc81bf4482fa6af081c7fb6129cd0.exe
Size

54KB
MD5

cd2dc81bf4482fa6af081c7fb6129cd0
SHA1

f9cad8933b0a7283f721ec3a394d8002fd9ba9a5
SHA256

24bb5af53f599e2d288ea3688435379fad8351777dfb7eb856790ceb65d465d1
SHA512

31009428b60c5711bddf79512307a62a3d6df3e4e408b303296e9c9794b87449ea6d2cd5164e2c54c24f5a0c41994ae55264368b93ec4efd420000dffb31a636
SSDEEP

768:qIomvQ7oTOUVAaMSEq2Wh18RD4tJH2T8KS:qrmvQkOUQSEq28eSLH2LS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cd2dc81bf4482fa6af081c7fb6129cd0.exe

Files

NEAS.cd2dc81bf4482fa6af081c7fb6129cd0.exe
.exe windows:4 windows x86

d212f4856ef91a73d17f9e9cdf7752bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
ClientToScreen
CloseClipboard
PostMessageW
CharLowerW
UpdateWindow
ChangeClipboardChain

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
HeapAlloc
GetProcessHeap
lstrcatW
HeapFree
lstrcpyW
GetCommandLineA

comctl32

ImageList_Create
ord17

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ