NEAS[.]8665a0a32a55df7b00f295050a872f30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8665a0a32a55df7b00f295050a872f30.exe
Size

23KB
MD5

8665a0a32a55df7b00f295050a872f30
SHA1

8a2b04713026d8256781ff50b50c6a0734b79d2c
SHA256

f8f918d4ec4905f57e9b6eb7df3485e4b74a458f01be2f6a37822701e086f91a
SHA512

f332185f77c1a2666c40a13bd7244a751ae2176a3460a92800fc68d006df6c9c422a713bd94f248fa95dc78951f0134af83553f711cd4b7c00db394916fae290
SSDEEP

384:IbRmmOIt0K/vDxbwpgDi7ZtCtY8alJZjLzu0h9kxC0/Mz3oPV:IbRmUvDX23RZjLsC0/MDg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8665a0a32a55df7b00f295050a872f30.exe

Files

NEAS.8665a0a32a55df7b00f295050a872f30.exe
.exe windows:5 windows x86

c07ef8bdf88571f34b5a5b7df7a82509

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
DefWindowProcW
CreateWindowExW
EndPaint
GetClientRect
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExW
ReleaseDC
GetDC
BeginPaint
DrawTextExW

kernel32

CreateFileW
GetModuleHandleW

gdi32

GetStockObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ