NEAS[.]2c45fb143689b59737cc55f6fa54ae30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2c45fb143689b59737cc55f6fa54ae30.exe
Size

106KB
MD5

2c45fb143689b59737cc55f6fa54ae30
SHA1

7fb43d457cb2e3731833771978962504f316a35d
SHA256

f1ee935b1ab0f5ef324c28dc0a826bf84e88f3c0a195d8987f1166a7e5ea8824
SHA512

4d127f2bdc98774929b6562466300bc4f794777eeea5fa43abe2a279f7d4ea0927c4d92940e4edb577377f596ca6cedd418155739032a8b512db36fa311683e9
SSDEEP

3072:uovCZHJNCZQdSj7gSnGKN/Up3SHFevGGwj:iGQ6nJ/UcwvGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2c45fb143689b59737cc55f6fa54ae30.exe

Files

NEAS.2c45fb143689b59737cc55f6fa54ae30.exe
.exe windows:1 windows x86

1e0b22dd6900ed585eb7b2802dcee058

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetCommandLineA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE