NEAS[.]0399efd3192961993fbc53febffadca0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0399efd3192961993fbc53febffadca0.exe
Size

299KB
MD5

0399efd3192961993fbc53febffadca0
SHA1

25710cc9846cec79e95ea19aa0d38d94532df3d9
SHA256

767c24ba909129b15c6ce1e1ed0c6b94fc5c68e6fc831df3c952decd2514fd10
SHA512

58d0202bd0cb4a0a762132f79773f6e11c9cc80162dc5e78ae4b9d0156f50a1695d61ce3e1e23ced6d56deaba91d718882819d8c1c1f564b1d35fc9e226da7db
SSDEEP

6144:A0MFsmuFv6cP2h26+yos/MoLX82U6IWookfZcegYf6r8QpFZhOqc+RWwpE:mOF6cOg6+yos0iUpdoEie6TOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0399efd3192961993fbc53febffadca0.exe

Files

NEAS.0399efd3192961993fbc53febffadca0.exe
.exe windows:5 windows x86

faf2088fd3d74f67e5d769a2023d503c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CreateSemaphoreA
GetFullPathNameW
GetStringTypeA
GetEnvironmentVariableW
Sleep
CreateEventA
GetModuleHandleA
CopyFileA
GetConsoleMode
FindClose
CreateFileMappingA
GetModuleHandleW
VirtualFree
ReadConsoleW
FindClose
GetFullPathNameW
FindNextVolumeW
GetCurrentDirectoryW
SetVolumeLabelA
GetVolumePathNameW
CreateFileA
FindClose

dbghelp

ImageRvaToSection
FindFileInPath
ImageNtHeader
ImageRvaToVa

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ