NEAS[.]d1e0c6df79917dc2d8a5c2369114ccf0[.]exe | Triage

Sharing

General

Target

NEAS.d1e0c6df79917dc2d8a5c2369114ccf0.exe
Size

18KB
MD5

d1e0c6df79917dc2d8a5c2369114ccf0
SHA1

a964a9db04e16ecc0182ba12f4494ff6fd91e402
SHA256

b46d96b2cefbd2515006c3b9e245ee48958883166bf0b40842235a91295c58df
SHA512

500acd275a502368f0ecba298589868450cad25036df4572f43ba5f1eab9077a2bdcc23387fa7d52133388fc40fae243fdf67aa97e41221893b3f0803546cf3d
SSDEEP

192:SRTQZOwUdXbg2+K+mBPu5wwKqlMJ7/+K+J3QUyqQ8888Lb8+nZ5LfH2kPdi+0J0u:WW5wwhuqL6hwqk4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d1e0c6df79917dc2d8a5c2369114ccf0.exe

Files

NEAS.d1e0c6df79917dc2d8a5c2369114ccf0.exe
.exe windows:5 windows x86

3fdef2dd28500d2abff7710d2cb92e52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SetCursor
SetFocus
MessageBoxA
GetDlgItem
TranslateMessage
DispatchMessageW
LoadCursorW
SendMessageW
DialogBoxParamW
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
GetMessageW
GetDlgItemTextA

kernel32

GetModuleHandleW
HeapCreate
CloseHandle
GetVersionExW
GetCommandLineW
ExitProcess

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ