NEAS[.]984bc6d2a8cc4fc1ae000febc256a0e0[.]exe | Triage

Sharing

General

Target

NEAS.984bc6d2a8cc4fc1ae000febc256a0e0.exe
Size

37KB
MD5

984bc6d2a8cc4fc1ae000febc256a0e0
SHA1

321bbaf9c5b1616c4dc17d53e8635505a48ea826
SHA256

55b2b20da349f3c1edf20edb6707bf4cc4ac09d56c5bac115846fb05df64da8b
SHA512

21c2b3abb5ad87bd865370810161253f58d65140297ac97665062fe2652ecba54dcdc3441b96207e3cb2b4b5be2797daf4c4487b8747c6f4050156c583746701
SSDEEP

768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjWDr/1J5TXtoKhDyC:fM3fiXjWv/1J5TXyKVyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.984bc6d2a8cc4fc1ae000febc256a0e0.exe

Files

NEAS.984bc6d2a8cc4fc1ae000febc256a0e0.exe
.exe windows:5 windows x86

2e78d2633923e668c6d4cf1636ec5a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
PostQuitMessage
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
CreateFileMappingA
FindNextFileA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ