NEAS[.]ConsoleApplication1_messagebox_64_1_0x000000021590A98C[.]exe | Triage

Sharing

General

Target

NEAS.ConsoleApplication1_messagebox_64_1_0x000000021590A98C.exe
Size

296KB
MD5

d146eab1aae3130add23ecb6ff869889
SHA1

a2f56cb813deb8745090a17ed0b4faedde596c44
SHA256

9d78da276ecb482a15bc3f7ba21b7c8044199b4db0c3538944944c2999cc4e98
SHA512

e544334785efa67a330865d84fe71438f0df02fb179fd7815e34c8441849cb6da3e1e6d7474163bc080660e34da3910581053de234550943f1d17f9ecac952cb
SSDEEP

6144:UbPoDiMjOJGRaGnpGftUoqHoTg2siUo5Rdqka5PNWB2UX:UQpjaGn8LqHmg2si3FaYtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ConsoleApplication1_messagebox_64_1_0x000000021590A98C.exe

Files

NEAS.ConsoleApplication1_messagebox_64_1_0x000000021590A98C.exe
.exe windows:5 windows x64

3ea598ed05beafebb8c44a286fa8e6ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapCreate
GetModuleHandleA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ