NEAS[.]6e3fff939d7c156247c2e259d5e61c70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6e3fff939d7c156247c2e259d5e61c70.exe
Size

37KB
MD5

6e3fff939d7c156247c2e259d5e61c70
SHA1

847852a1d77f6f09026cc66d9f65f0411cdce003
SHA256

6f2083f38cf7b8ba30acdeb23dc93bca436c3c88c2721c4076bc6d6a0d3f98eb
SHA512

bd9b985f59ead8b2e2747f490c9f1557b136b7f0ac5297ce5114e0c80a61cde5502075256e1c1d6784deb88d7123e2aa370093d4adc62f18af30f8750e2ae3dd
SSDEEP

768:LZ+Zxe90i19C92eocaWTmNtY6coZOu5dGcTYKBZPA:LaiZ19C92eocaWTKtNJZOu5EFgZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e3fff939d7c156247c2e259d5e61c70.exe

Files

NEAS.6e3fff939d7c156247c2e259d5e61c70.exe
.exe windows:4 windows x86

20e0010628f1fc5ba04633e130c6e90e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
FlashWindowEx
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ