NEAS[.]78826c010fb25acc795738772a352290[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.78826c010fb25acc795738772a352290.exe
Size

35KB
MD5

78826c010fb25acc795738772a352290
SHA1

31178b99c29ab3462c627da4c759a99d74e4f132
SHA256

d3393fb137704fe5391cb8b063823d2f30d87bd141f8412ee7e9ee357e5fb9ed
SHA512

f56a6ec560f5bc7a171e2519271d9df346d33d617035dc2314b077e83d3f7b3614f52081be8a3e9d0cc7dbd8c6b12c409381922958f3664d0354b23c3260fd0d
SSDEEP

768:45ZFuzgxucryOmJQqO3VhDWiNlW+O96Qhlqf/mSI:4579ucrFmJQqO3VhDWiC+i6QOeSI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.78826c010fb25acc795738772a352290.exe

Files

NEAS.78826c010fb25acc795738772a352290.exe
.exe windows:5 windows x86

64ae6f7ad7b9fe42fe92f6ebc5207506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateFromHDC
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDeleteGraphics

kernel32

LoadLibraryExA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryA
LoadLibraryW
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetCurrentProcess
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ