NEAS[.]baaa0e01e0f4b7b2b17ff3244a64f690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.baaa0e01e0f4b7b2b17ff3244a64f690.exe
Size

31KB
MD5

baaa0e01e0f4b7b2b17ff3244a64f690
SHA1

5263624dee0b1e14c2d4f6c713aa9f4568c6ddf5
SHA256

6e25b99ab57be0336856800cb095ae2d04aacfeb8bb62ee071146dad09ebb3b6
SHA512

a9551657661dfb6298eaad093b87ea5b53ca98b404093db01cc2010d8789f795352da63bb62c90c458cad5b628bf66964b09846e36080e3b2e5dd706cf484765
SSDEEP

384:ukkHfMx3TUMQkOatgoldmPBrX/D1ekhOtO:u4B9F2LD1ekUtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.baaa0e01e0f4b7b2b17ff3244a64f690.exe

Files

NEAS.baaa0e01e0f4b7b2b17ff3244a64f690.exe
.exe windows:5 windows x86

d304ef8e9e8393c0028c6e2332cf21b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
DialogBoxParamA
SetScrollInfo
MessageBoxA
SetWindowTextA
EndDialog
GetDlgItem
ScrollWindow
DestroyCursor
CharLowerA
ShowCursor
SendMessageA
DestroyMenu

kernel32

GetProcessHeap
CloseHandle
GetStartupInfoA
CreateDirectoryA
GetVersionExA
ExitProcess

comctl32

InitCommonControlsEx

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ