NEAS[.]bfea7ea3245e6c51cb925fd31f1d6d50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bfea7ea3245e6c51cb925fd31f1d6d50.exe
Size

31KB
MD5

bfea7ea3245e6c51cb925fd31f1d6d50
SHA1

60827dcff6f7f888a2b26b912e24da729bff3212
SHA256

cd829b54cdf1dd171fcb0a0ee5febf8270ed25477cd62ae239b6c3b55814f833
SHA512

7a5d19ae36bc08bfc43a38787dd412677ecfb1f740bed5c58c3d5cd35eed40d71fe2541e1d2999fc81286aac0350ff3d1760cc2fbbc489d81e69a904b05b07b7
SSDEEP

768:3MRGiEKWYZm7LTk2Rpu9fWWq5gXCH03qBFYJ3e8pzGP:cY/KJYRpu9fWWq5g7qBCgGzGP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bfea7ea3245e6c51cb925fd31f1d6d50.exe

Files

NEAS.bfea7ea3245e6c51cb925fd31f1d6d50.exe
.exe windows:5 windows x86

745580b19322f01706d82a92e2b8719f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
DispatchMessageA
CreateWindowExA
EnumWindows
GetMessageA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
EndPaint

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ