NEAS[.]a3bf5320183b6133a7c95c4e4cb12fa0[.]exe | Triage

Sharing

General

Target

NEAS.a3bf5320183b6133a7c95c4e4cb12fa0.exe
Size

24KB
MD5

a3bf5320183b6133a7c95c4e4cb12fa0
SHA1

fe5088aacb9d88e88088e4c0da2250e550fbfdae
SHA256

53e3bda4e5e5fab2bfe0f64fab623f95289eb5540437792049a61b10106acdf3
SHA512

d46f006281a35cea8acce86dec5317fd895337ed8ea470f4f8ee5da5a5eaec26f8bcbf4cc9920bcd4e97cf9709726f9a59c8ff974b75eed98002b90f6fbdc5c6
SSDEEP

384:uVRo66Q+k1XWuEWnaHCRps0gA9tB/ezBLzrnFYFTgQ9gDQGPD:SeAaL04BLz72FTgIuQGPD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a3bf5320183b6133a7c95c4e4cb12fa0.exe

Files

NEAS.a3bf5320183b6133a7c95c4e4cb12fa0.exe
.exe windows:4 windows x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ