NEAS[.]d9bf4a65688983057abeb594ba840d70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9bf4a65688983057abeb594ba840d70.exe
Size

24KB
MD5

d9bf4a65688983057abeb594ba840d70
SHA1

a081ff30db0b0cf658309ab214539203c8133495
SHA256

c6e970050804c67f3fc851d2ae811aa41f0e1ca30df056b557fc7d1834095ec5
SHA512

dc98657f91477c7aee1d39f49ddd0eba65d574e635490cf15f59591f0b2f745d2b321005e2c2ceebb06e48c25af063a69867bcd85c50bf32bd8736845140e87f
SSDEEP

384:JC+EaVVpDSL/7wIUAch1A9NB/erdO9oMCCQcxbRxla0rh84KtjZ8YYEh3A+s:JSfL/76As1FdMQ8RjaeejeYRh3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9bf4a65688983057abeb594ba840d70.exe

Files

NEAS.d9bf4a65688983057abeb594ba840d70.exe
.exe windows:4 windows x86

6555803adfd8196e439b6655d1791942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
SendMessageW
GetDlgItem
ShowWindow
UpdateWindow
DialogBoxIndirectParamW
DestroyCursor
CreateCursor
MessageBoxW
ShowCursor

kernel32

CreateFileW
CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ