NEAS[.]644f13b62938b1d7166a6fb1d2ca3900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.644f13b62938b1d7166a6fb1d2ca3900.exe
Size

39KB
MD5

644f13b62938b1d7166a6fb1d2ca3900
SHA1

d7289ccb8159e0041c4946a076114ec4560eb5ef
SHA256

911a94623673acc08568cfaddac7ab483b4ef9e82a170fcdcdaaacfba8cc8097
SHA512

d98a24113bc2223438c86a7a335d6164c5d09e2cb2a9eb4de9b378234da2ebcaa65f19e6a6dcbf7ef161b09d66f64ccfb80aadc29dc4c6383c31fbc2318f3208
SSDEEP

768:5XULQpuS786FmZTzLFBpWz1dIlWHC+PwXeMmQ2B731QvtVLUgH:5XDuSVFmZTzLRWz1dwWHC+YDmQ2B73wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.644f13b62938b1d7166a6fb1d2ca3900.exe

Files

NEAS.644f13b62938b1d7166a6fb1d2ca3900.exe
.exe windows:5 windows x86

ca4c70b3a69137ec777fc848626a0aaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps

winmm

mciSendStringA

msacm32

acmStreamOpen

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ