NEAS[.]3b9d070da8a1ea600137b3f133027880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3b9d070da8a1ea600137b3f133027880.exe
Size

39KB
MD5

3b9d070da8a1ea600137b3f133027880
SHA1

52a7547fa139035122bdf83a101ec2aa09ca2f88
SHA256

2e01aec7f082923bc4a6ffca1c77df7a898b0adf4fb70d09b9701086dafb841f
SHA512

299292793cb359fa4ad9a3ef5056b23694aa1ad89ef2b29ac774275d7c3460d1856cf5108ef5de718646ca4199f74275a6926cb153fc05ba1a1e185e93eb77d1
SSDEEP

768:/RBra/Szi5JeJPfJJyZubUDtDJBFI/Fkd/ATNcbosSr6E:/3ra/SzyZubU9JjiFkW5F/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3b9d070da8a1ea600137b3f133027880.exe

Files

NEAS.3b9d070da8a1ea600137b3f133027880.exe
.exe windows:5 windows x86

d5f816a33d9d1b53674d94bcd201ba83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
RegisterClassA

msacm32

acmStreamOpen
acmFilterChooseA

kernel32

GetModuleHandleA
GetProcAddress
CreateEventW
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetLastError
GetTickCount
CloseHandle
DeleteCriticalSection
WaitForMultipleObjects
Sleep
InitializeCriticalSection
SetEvent
TryEnterCriticalSection
GetPrivateProfileIntW
GetPrivateProfileStringW
GetDiskFreeSpaceExW
GetUserDefaultUILanguage
GlobalMemoryStatusEx

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ