NEAS[.]3e7cebf623401ab1b40e6dfeb4c62a90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3e7cebf623401ab1b40e6dfeb4c62a90.exe
Size

196KB
MD5

3e7cebf623401ab1b40e6dfeb4c62a90
SHA1

c604243fea51b45ca69f69d0c74faf57a6db7995
SHA256

c63657755fd83aba80df33715742166a01fb738e53816bed3afbb8d592160a90
SHA512

930b746f83549f919136d1b16029e3c51806a86fa445ff931c47765593e92c6ced39fbec108f381c1c3a2ed860d293895755caf9e1053d88195fc7d63a56be60
SSDEEP

6144:DxBfxB9LFmg0PKAVpCE5VwNw77oa9GGD:DxBf/9Zmg0i+AegEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3e7cebf623401ab1b40e6dfeb4c62a90.exe

Files

NEAS.3e7cebf623401ab1b40e6dfeb4c62a90.exe
.exe windows:4 windows x86

6d485d8e9c6890655089a651bccb43f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

RegisterClassA
CreateWindowExA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
LoadCursorA
LoadIconA
LoadMenuA
GetClientRect
SetFocus
MessageBoxA
PostQuitMessage

ole32

CoInitialize

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ