NEAS[.]31db3aef4b070ca0348a2ee2913fb8e0[.]exe | Triage

Sharing

General

Target

NEAS.31db3aef4b070ca0348a2ee2913fb8e0.exe
Size

65KB
MD5

31db3aef4b070ca0348a2ee2913fb8e0
SHA1

b2d1735ec995242cdbce7f58f7368adebc5558e4
SHA256

abe3414ab4aec481da4fa45aa02ae45f9e3991baf8ff5a6cddd8c4c6c9e1d827
SHA512

ae9c807f337058f23ee49720009aa79e8b8c63f8b38d52923105279d6c523d8b2cdd731f0e0a193d37587fab5ff36b67746c430c27dba0b66c0cb241b5b9c056
SSDEEP

1536:uohAPN4AF4Z7GrLQA/GGg81ilM501M0r9odo6dqcl:uRPGAF4m00GGn1gM5p0acc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31db3aef4b070ca0348a2ee2913fb8e0.exe

Files

NEAS.31db3aef4b070ca0348a2ee2913fb8e0.exe
.exe windows:5 windows x86

f636d32eed8b5d304316d0e45b9cdaba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
WriteConsoleInputW
VirtualProtectEx
ExitProcess

user32

GetTopWindow
GetWindowRgn
EndPaint

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ