NEAS[.]329309ae106171708a1df6e433be78e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.329309ae106171708a1df6e433be78e0.exe
Size

36KB
MD5

329309ae106171708a1df6e433be78e0
SHA1

5c9b437e0cecb33ff74878c0514b9b00bfc6335c
SHA256

a4d5ec702f58524ae17985e2ee7d12d0c6c5e8dea14dbe20e9baa94438495892
SHA512

2865edd7adac7d48b65361bc4beec82b2ccb2dfa147ed8bbd23cb8667bf9720d9ce28475de3c92b3ebc9591ffa216ea8bdf5262036f33555d51be7fcc223a0cc
SSDEEP

768:ZNYvd4O0MB7dAAAyM13vfdHldhwyE7+OGa0axiI/:Zad4OdBdAAAyM13vfdHldhwt+OGa0wiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.329309ae106171708a1df6e433be78e0.exe

Files

NEAS.329309ae106171708a1df6e433be78e0.exe
.exe windows:4 windows x86

9a13fc92a634418770f4678ed35ff83f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
SizeofResource
lstrlenW
LockResource
LoadResource
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualFree
ExitProcess

user32

GetDC
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
ReleaseDC
SendMessageA
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
GetMessageA

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
BitBlt

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 986B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ