NEAS[.]f9c6b8049a1098b5fce25f4028573f70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f9c6b8049a1098b5fce25f4028573f70.exe
Size

23KB
MD5

f9c6b8049a1098b5fce25f4028573f70
SHA1

b6cc5138b19a8cf520a54c36318ed985caff3481
SHA256

6c978c4fa0ce3a9fd8bc6eeee027b0c70162ee134382cf21a3a6b053e4b36b5a
SHA512

682035e16ffe6846f10076df962ea5c0c80034c0f3f3fb6b217f007f81b7a59aa7c9efdc3c0d3e4f192763f5f3957ff4c1db4bca8080c526f8db41f24ccb9055
SSDEEP

384:nZOd1djpW9s3mjHXRrs905INeZCFtejlIko5dN127BFVn2p4lAnZ8OJWYB+tnIOF:19djHXRrs9sINeZEtejlIkoLN127BFVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f9c6b8049a1098b5fce25f4028573f70.exe

Files

NEAS.f9c6b8049a1098b5fce25f4028573f70.exe
.exe windows:4 windows x86

ecf1bd3206976f3e5a517a2b934d647d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
MessageBoxW
wsprintfW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetModuleHandleA
CreateFileW
CloseHandle
GetFileSize

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ