NEAS[.]252a8365ee4753e15b119d859c4d8280[.]exe | Triage

Sharing

General

Target

NEAS.252a8365ee4753e15b119d859c4d8280.exe
Size

21KB
MD5

252a8365ee4753e15b119d859c4d8280
SHA1

820163539cec53b9d0030adcd4faa17900ae5fc3
SHA256

18fd43bdd0261b58c77fdf4d144d2715e604ee7a394a591eac28ed030aba4d97
SHA512

08ec0760eb99ec94f1f772dffdba5beae0ed52b7d11f89f03417d60855c73fdb6aaef81cbf48c9c9112890c3739176c3d0d38b94b5e48dc0820d28d068a8b043
SSDEEP

384:azg+XE+YkCkSbBUAch1A9NB/erdVvqwAli:mXE+YkCTqAs1FdE3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.252a8365ee4753e15b119d859c4d8280.exe

Files

NEAS.252a8365ee4753e15b119d859c4d8280.exe
.exe windows:4 windows x86

02aafaecc781c6631cc1af6459a7af40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetDlgItem
wsprintfA
MessageBoxA
ClientToScreen
CreateWindowExA
DialogBoxIndirectParamA

kernel32

GetFileSize
CloseHandle
CreateFileA

comctl32

ImageList_Create

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ