NEAS[.]ddce3d7e3db0da06cf9f40cdb74c9eb0[.]exe | Triage

Sharing

General

Target

NEAS.ddce3d7e3db0da06cf9f40cdb74c9eb0.exe
Size

23KB
MD5

ddce3d7e3db0da06cf9f40cdb74c9eb0
SHA1

33b9c1e3a72e6fb93318a97331dbee03a9ecf56f
SHA256

ab71040825cbe09e80659ebc9cbb6aeb38d655eea5dd0fbb89cfdb8ffc57b067
SHA512

1781a2e38e6ff57214ad3a1a657ce6a092327ae1f28e3428a319d345239b20a59d3165dcc79aefac91d0f6bb30dde13cd9fcc37e304f277dc455f3d99050e7fd
SSDEEP

384:nZOd1djpW9s3mjHXRrs905INeZCFtejlIko5dN127BFVn2p4lAnZ8OJWYB+tnIO2:19djHXRrs9sINeZEtejlIkoLN127BFVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddce3d7e3db0da06cf9f40cdb74c9eb0.exe

Files

NEAS.ddce3d7e3db0da06cf9f40cdb74c9eb0.exe
.exe windows:4 windows x86

ecf1bd3206976f3e5a517a2b934d647d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
MessageBoxW
wsprintfW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetModuleHandleA
CreateFileW
CloseHandle
GetFileSize

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ