NEAS[.]2cd35ea16a9281990673f81034b66450[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2cd35ea16a9281990673f81034b66450.exe
Size

28KB
MD5

2cd35ea16a9281990673f81034b66450
SHA1

4beadbba3339cffc69c49877f470d90516e13db3
SHA256

fa6794d56825a7972a0edd04117998da80ef87a19d67e1b11fd3c981e15548ca
SHA512

35986e3f42935460fdaedadf262f99410076c88e01eb4b34778801824a96df0b25bb4a357890e30eade3168cf5bf215e2a0e5755ef22d4392fd59bb947a06f8f
SSDEEP

384:kkju1dbvG8Qqrxiw39A9TMiLiuV9ELY6Bvc7cHkKrovZm:hIC+bC9EL9v6cl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2cd35ea16a9281990673f81034b66450.exe

Files

NEAS.2cd35ea16a9281990673f81034b66450.exe
.exe windows:4 windows x86 arch:x86

3a9c09fa738a6f8013500f35f9420e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ