NEAS[.]a3af7c53c90b66684c0688ceefabd810[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a3af7c53c90b66684c0688ceefabd810.exe
Size

38KB
MD5

a3af7c53c90b66684c0688ceefabd810
SHA1

3441b322fd19d74127cf61b3a2df4543ae9e3853
SHA256

d51a357a2cde5e9dd0898d5b8c06f90ee397ff79fc31d8213fb9fc033b7c17e2
SHA512

4b0f32e4274e346d599728f1afe1cb87a75b82ff80b29c4f5ba0fc1ba905cacb0d9d69b27006564b8b0416770a37e754279d34abe987febeb82913ab738b0dcb
SSDEEP

768:AfyUBPlg0lv597JWANl61DMpIs44f9FoIRYb0H:AfyU5R59fNl4DMGs9PdRa0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a3af7c53c90b66684c0688ceefabd810.exe

Files

NEAS.a3af7c53c90b66684c0688ceefabd810.exe
.exe windows:4 windows x86

a79387d1faab93d53469d6b3d5b2f4f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
ExitProcess
HeapAlloc
DeleteFileA
GetLastError
CloseHandle
GetEnvironmentStringsA
LeaveCriticalSection
GetModuleHandleA
lstrcpyA
LoadLibraryA
GetProcessHeap
GetLocalTime
DeleteCriticalSection
EnterCriticalSection

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ