NEAS[.]57f4532d22a4d815d12fc5d03ee970b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57f4532d22a4d815d12fc5d03ee970b0.exe
Size

61KB
MD5

57f4532d22a4d815d12fc5d03ee970b0
SHA1

2732103c3f5302ed5866abf63005c94917a19012
SHA256

1644c8b18fc727eaed38485ecb7a9599ec5165da2b0daa01cb5cc6f42a1d1780
SHA512

cfa0211ddd2b26655dd335be7e16f93f12b97ab409258bedb3710dd51a7c4434af0b927f6ef83034319b7853dccd3b62bb621963865644b23b6c46f294b5d10d
SSDEEP

768:FoXuhcfr92oi27l5lNuC4RcYMZBrk5CmtBo4c1WyOiW9DYYxjgf9KsBdGXNPg0:AxF57l5Tv2kBMl418iW9EYxjgfbdGD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57f4532d22a4d815d12fc5d03ee970b0.exe

Files

NEAS.57f4532d22a4d815d12fc5d03ee970b0.exe
.exe windows:5 windows x86

552beecf6a7730bd25d9d7bedd5484da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsSameRootW
PathGetArgsW
PathIsContentTypeA

user32

IsDlgButtonChecked
AppendMenuA
OpenWindowStationA

kernel32

OpenWaitableTimerW

gdi32

CreateRoundRectRgn
CreateRectRgn

Exports

Exports

CommonEpisodE
?FinalEpisode@@YGEUCOMMANDLINE094@@WE
?FormalEpisode@@YGEUCOMMANDLINE094@@WE
?SecondEpisode@@YGEUCOMMANDLINE094@@WE
?ThirdEpisode@@YGEUCOMMANDLINE094@@WE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gear
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.heal
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.real
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE