7946b5d0ea6a22b998185bee2c092c50_NEAS | Triage

Sharing

General

Target

7946b5d0ea6a22b998185bee2c092c50_NEAS
Size

31KB
MD5

7946b5d0ea6a22b998185bee2c092c50
SHA1

26e348a80770da152a251cb2dec0ccaf8e07ada3
SHA256

9e9af59c2d6a72d9f883d13281093382ed357f2b63176061b5484ef7bd6805c9
SHA512

70071ac72a80cebd10883b3f1fb0218d9e81a17d5e42212c9c191a5b4745c517b5dc94eae45c9866ca45944453801ac20495cd391d80ecf69580b20aada2d0e7
SSDEEP

384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8xjUNSd+y:Q6K7fJKFiQTrLjdTLTW8xwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7946b5d0ea6a22b998185bee2c092c50_NEAS

Files

7946b5d0ea6a22b998185bee2c092c50_NEAS
.exe windows:4 windows x86 arch:x86

93ef196156d6da1d4462ba7d424ca7b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA

gdi32

CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ