NEAS[.]d9c5da615811b742175852c4a97eaf50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9c5da615811b742175852c4a97eaf50.exe
Size

25KB
MD5

d9c5da615811b742175852c4a97eaf50
SHA1

00dc8e5cabf1aa96d55ab0a3eaf49b9f2ddf12f7
SHA256

f79fa512ed73885a6944ab8ac4bb63132200b63da47a2f1b7f3f24b820f6da85
SHA512

7d190124d441d8d7eef7bf8a4964a275051f41f52e5e7db607d4ded12208e46e97bdaeffff95377d03f62bccf3eb17afb7cac91efec4f819c93df93d9303337e
SSDEEP

384:Iq1u2pAB5mCiqnPRrYYFdhlL9OyeTtvb8MpjyhQLLoQ12XOU:Iq1uGSmJMxvhstRtYPQ2n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9c5da615811b742175852c4a97eaf50.exe

Files

NEAS.d9c5da615811b742175852c4a97eaf50.exe
.exe windows:5 windows x86

5c7bd8e9f46408bfe57efe5104eaa1c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
RegisterClassExA
SendMessageA
ShowWindow
DefWindowProcA
GetFocus
EnableWindow
UpdateWindow
IsZoomed

kernel32

CreateFileA
HeapAlloc
HeapCreate
HeapDestroy
ExitProcess

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ