NEAS[.]c5979fa34d2413c310cea480db6c8d10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c5979fa34d2413c310cea480db6c8d10.exe
Size

20KB
MD5

c5979fa34d2413c310cea480db6c8d10
SHA1

a2bc6bb1d5776a7febbae53d0aeb1c0e10941fb9
SHA256

8a95c700ec64e8662435bcd777b81adaaea0da9499f4351fafb96667108815ee
SHA512

459aa2cca2fb7ca6bafc79d3a0ca606c1d93554c4f7bed9a34076c427ec388445b2014d5a617117e992c9f34fed2b988686fc715254bed81c84b3c9218e7d858
SSDEEP

384:JC+EaVVpDSL/7wIUAch1A9NB/erdO9oMCCQcxbRxlETp:JSfL/76As1FdMQ8RjEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c5979fa34d2413c310cea480db6c8d10.exe

Files

NEAS.c5979fa34d2413c310cea480db6c8d10.exe
.exe windows:4 windows x86

6555803adfd8196e439b6655d1791942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
SendMessageW
GetDlgItem
ShowWindow
UpdateWindow
DialogBoxIndirectParamW
DestroyCursor
CreateCursor
MessageBoxW
ShowCursor

kernel32

CreateFileW
CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ