58d7faa5675e470ab5d6d8c03d60cc30_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58d7faa5675e470ab5d6d8c03d60cc30_NEAS
Size

36KB
MD5

58d7faa5675e470ab5d6d8c03d60cc30
SHA1

21cd3ba08d628dba79d750d814ba04550ab69293
SHA256

7a003a679fb4c340614bf8d9348c7c61a000bc7184e1a328e665127194a132e9
SHA512

2ca4bb5ffd62ef2af2d30dbae1ac495f0773fd6ab97be5e5142b91852e8a7aa51e55802753265a58ff1a80971784d8f56f4bf6ac8821270ad7e8e770a6f541d4
SSDEEP

384:SdtxuUV89lb5NKjSyC8bAHcQvRj9n7HdcDWziHFmfi3RfR6PNoNZA9zJ10vIG:oqP9SSyC8ucWl97cFmEf8loG0vIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d7faa5675e470ab5d6d8c03d60cc30_NEAS

Files

58d7faa5675e470ab5d6d8c03d60cc30_NEAS
.exe windows:4 windows x86 arch:x86

807348b7bad6f5d642007a70e1c52008

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
IsChild
GetDlgItem
EndDialog
SetFocus
SetCapture
SendMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
GetMessageA
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
DialogBoxParamA
GetDlgItemTextA

kernel32

GetProcessHeap
CloseHandle
GetVersionExA
HeapAlloc

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ