NEAS[.]9ee8d7a5c37f9f332671179fefca5e70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9ee8d7a5c37f9f332671179fefca5e70.exe
Size

7KB
MD5

9ee8d7a5c37f9f332671179fefca5e70
SHA1

e18cb0bc685a835fe0365e8fd1028266199e1eb1
SHA256

88d1c67021ff9af3e9051655a62c6c0a91cb71f82e54440e229ebde0e3318ce2
SHA512

009394df22b00a4092bf4f91ff75a226329fc6c7fa43619476f5415e4b953dab7eb676535a6a7da66fa8dc7c5bb387c1de16b82c865e93cefc472be7f1ec6d0a
SSDEEP

96:j/txDBKnAuzPfG4NqnlydUYdl5nHBl/ZhquQ0YxcSzq/:j/rDXBuqlUdjBBjQcSe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9ee8d7a5c37f9f332671179fefca5e70.exe

Files

NEAS.9ee8d7a5c37f9f332671179fefca5e70.exe
.exe windows:4 windows x86

f7b64eddb02c7fb8ccf503474945a97f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
DispatchMessageA
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
CreateWindowExA
RegisterClassExA
SendMessageA
SetWindowTextA
TranslateMessage
UpdateWindow
PostQuitMessage

kernel32

GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSize
RtlZeroMemory
CreateFileA
CloseHandle
ReadFile
ExitProcess

gdi32

GetStockObject

comdlg32

GetOpenFileNameA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE