NEAS[.]b5b9f4170ef2f9046e76ca31ab40d7c0[.]exe | Triage

Sharing

General

Target

NEAS.b5b9f4170ef2f9046e76ca31ab40d7c0.exe
Size

26KB
MD5

b5b9f4170ef2f9046e76ca31ab40d7c0
SHA1

8791e5c39693a0c6ceef1f8b94dec43f67415b45
SHA256

e150f55cf53084c82c684fd9629f227d71276e94f8517eaa52abea9fe9e8d53b
SHA512

e58dcffaee61512adefad3187139505b076d764f2f124f1cbd258becc70e41b5ea9331a4b73703425902b351f9d736221d6994ae9925bfe582942bbf7b658e74
SSDEEP

384:uVRo66Q+k1XWuEWnaHCRps0gA9tB/ezBLzrnFYFTgQ9g3lYx+QL8d4buNtCo1f:SeAaL04BLz72FTgIYYU08dEFod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5b9f4170ef2f9046e76ca31ab40d7c0.exe

Files

NEAS.b5b9f4170ef2f9046e76ca31ab40d7c0.exe
.exe windows:4 windows x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ