NEAS[.]45c90efe12a64ebfd4547543b2079510[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.45c90efe12a64ebfd4547543b2079510.exe
Size

39KB
MD5

45c90efe12a64ebfd4547543b2079510
SHA1

da800e7387a28f6432301f27b40285fcd3864399
SHA256

869b7a9aadb70f32635c1e2e7340bb2c88e530821898e5f5934507f30b071ff8
SHA512

20c584ca26f088bd716fbe2db3b5e0cbfe4b02c99416d5e4e495060173797ff5637491c3db0415df0b20fbaea24349a679d13e5822364674979db70f1ea26bec
SSDEEP

768:/RBra/Szi5JeJPfJJyZubUDtDJBFI/Fkd/ATNcbosSrBv:/3ra/SzyZubU9JjiFkW5F1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.45c90efe12a64ebfd4547543b2079510.exe

Files

NEAS.45c90efe12a64ebfd4547543b2079510.exe
.exe windows:5 windows x86

d5f816a33d9d1b53674d94bcd201ba83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
RegisterClassA

msacm32

acmStreamOpen
acmFilterChooseA

kernel32

GetModuleHandleA
GetProcAddress
CreateEventW
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetLastError
GetTickCount
CloseHandle
DeleteCriticalSection
WaitForMultipleObjects
Sleep
InitializeCriticalSection
SetEvent
TryEnterCriticalSection
GetPrivateProfileIntW
GetPrivateProfileStringW
GetDiskFreeSpaceExW
GetUserDefaultUILanguage
GlobalMemoryStatusEx

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ