NEAS[.]80adcd68e653ddb34d6b140ae62943c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.80adcd68e653ddb34d6b140ae62943c0.exe
Size

19KB
MD5

80adcd68e653ddb34d6b140ae62943c0
SHA1

5d33923c5a9ab7c29cc90456bb7f66d8a4180a85
SHA256

e9e7891aec2cbf7433b0c960daf7885f9b059726025ea025252294384b173538
SHA512

e5b3278b5da1fc9c425587d2c223769a895e151b090178560ab99577ffea1fbc3f966fbc5ed538c5980fd3535a4932ae73b95a99acfa2d8c527d73f6dddc7d60
SSDEEP

384:ikPGuG4S/F7eLQcxJjo8390scBVUaH5H89o:qfdUJjOtn5e9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.80adcd68e653ddb34d6b140ae62943c0.exe

Files

NEAS.80adcd68e653ddb34d6b140ae62943c0.exe
.exe windows:4 windows x86

3a9c09fa738a6f8013500f35f9420e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ