94f502f88a60d8dd54cd850c67fd08a0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94f502f88a60d8dd54cd850c67fd08a0_NEAS
Size

62KB
MD5

94f502f88a60d8dd54cd850c67fd08a0
SHA1

deb8d4c258475c77b397d55297fa34754757e2b0
SHA256

de850ca4fd820622e5f9730a89744b6a766e8a39fa3ecb32567483f554083903
SHA512

fd6374fe04d7c68c050622dac9800e960d43754fd433ff4825f2108b8bd955a3566be083032e41b915da38b8744221645bf64c00a471fc384d188260d798d7b4
SSDEEP

768:qRVyGrbqomOIPpkbWJu8T3maD2o28H1w4Btj1rlo7wvt3lC:CXIOAowuQVw4Btocvt1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94f502f88a60d8dd54cd850c67fd08a0_NEAS

Files

94f502f88a60d8dd54cd850c67fd08a0_NEAS
.exe windows:5 windows x86 arch:x86

85cccb70a77a20ff827aa4b7263b6b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SetPropA
SetScrollInfo
LoadIconA
SendMessageA
MessageBoxA
DefWindowProcA
RegisterClassExA
CreateWindowExA
BeginPaint
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
EndPaint
GetCursorPos
DispatchMessageA
ScrollWindow

kernel32

GetCommandLineA
LoadLibraryW
lstrcpyA
GetModuleHandleA
GetStartupInfoA
CloseHandle
lstrcatA
MapViewOfFile
CreateDirectoryA

comctl32

ord17

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ