NEAS[.]8ed1c6f97da28c0c92cbf24d4ac696e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ed1c6f97da28c0c92cbf24d4ac696e0.exe
Size

26KB
MD5

8ed1c6f97da28c0c92cbf24d4ac696e0
SHA1

9ec45916e570f699433aac7794f055f2f8dfcca1
SHA256

23af6e375248bdad3bb6725851793d8f79f55c06cfe5338156a99fb3b2b19698
SHA512

e752624a551ca35fc06d2c69a00a50b559eaf39bdb8bb2db293e0a4fc4d97199b06ab186e8360ff61376d3a6820eb9f3f4cdb3db9b271bc4e6348d3550e10062
SSDEEP

384:uVRo66Q+k1XWuEWnaHCRps0gA9tB/ezBLzrnFYFTgQ9g3lYx+QL8d4buNtCr3zfZ:SeAaL04BLz72FTgIYYU08dEFr37Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ed1c6f97da28c0c92cbf24d4ac696e0.exe

Files

NEAS.8ed1c6f97da28c0c92cbf24d4ac696e0.exe
.exe windows:4 windows x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ