1f4ac5a31045447977618c64c833eb70_NEAS | Triage

Sharing

General

Target

1f4ac5a31045447977618c64c833eb70_NEAS
Size

29KB
MD5

1f4ac5a31045447977618c64c833eb70
SHA1

0e69c440a7fd8efe4b0a33bc76db6b03297185b3
SHA256

8bd75f9c6b4035dc30c7a3ed9913702c91115a9561cfb262a5b4d630e4d8cbed
SHA512

f7375767e8f79da4886b8e355a27b5204e519fa37dcad2b62a9090e15adab5e01013b8c29524759a8335e7184233cb03a71a08d10ec01c3c8b1edfb614d0de76
SSDEEP

384:6gmi9aclTHApPFpPNyE40aFF666666666JJ7UueqrDjFvbusSFb2+hjc5QQIe:RmIVAp7lyHeUueqkpFb/Fe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f4ac5a31045447977618c64c833eb70_NEAS

Files

1f4ac5a31045447977618c64c833eb70_NEAS
.exe windows:5 windows x86 arch:x86

6a746de356fec43a4a9b63e328ee9516

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
GetDC
RegisterClassExW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
DefWindowProcW
PostQuitMessage
UpdateWindow
ShowWindow
DrawTextExW

kernel32

GetModuleHandleA
HeapAlloc
GetProcessHeap
GetStartupInfoA
CloseHandle
lstrlenW
HeapFree
CreateFileW
ReadFile
lstrcpyW

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
_exit
_XcptFilter

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE