NEAS[.]0bda7be7ed4112997fc2b1357c5bc850[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0bda7be7ed4112997fc2b1357c5bc850.exe
Size

161KB
MD5

0bda7be7ed4112997fc2b1357c5bc850
SHA1

00af0de53cff5e1bdb205ce1c25600049d3fae99
SHA256

37818d49148305a4b8fbf10c379f148ccec6ee36d91b43e7b77168b757682c9f
SHA512

775d53b58adac9fc25590ad0e79798a90fdf7f71f5f545812e56861511bba965f99d2c261c5029125c5c0ac63d9835cbcb4e995a1082fe0f9a58b4b856cfbcf7
SSDEEP

3072:uj/3fGEl8bLO2qn1Hu6OsiaRdDRwYkbAcCH/C/RGKpwRtcPCo9QCb:uLbQHuLOxaRrdcCH2Q+wK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0bda7be7ed4112997fc2b1357c5bc850.exe

Files

NEAS.0bda7be7ed4112997fc2b1357c5bc850.exe
.exe windows:5 windows x86

d8949c8b8780306dafd22c949f1b9a1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ChrCmpIW

kernel32

IsDBCSLeadByte

user32

GetActiveWindow

Exports

Exports

ActionPlaY
?TemplateMessage@@YG_JUAPI_VERSION@@U_LOCALSUBTHREADIDCOMMON@@@Y

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0xA145
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.c0xa145
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE