NEAS[.]00bb82705805c48ee9c0c441102a53b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00bb82705805c48ee9c0c441102a53b0.exe
Size

320KB
MD5

00bb82705805c48ee9c0c441102a53b0
SHA1

80a7ae4387cefb804c0b86e9e8538caeb541294a
SHA256

9c039b6cfecefb1ce1e5372e34139218ae6660f3ec3f9becfe70371af10f688f
SHA512

52e10d8236dbbf746ca6859a7d5c94801d8ddb2c672e57d39467ba6ab97a51dc8f4eb8485ea6e3393933f9024752abdba71a5ba7a9c126ad4640a3e7965f12d3
SSDEEP

6144:ljhwAgzjjsijDH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:lF6fswr2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00bb82705805c48ee9c0c441102a53b0.exe

Files

NEAS.00bb82705805c48ee9c0c441102a53b0.exe
.exe windows:4 windows x86

03ec9520fe855af52a2193f9b93f88d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ShowConsoleCursor
MoveFileExW
ReadConsoleInputW
SetEvent
GetGeoInfoA
OpenEventA
GetOEMCP
_lread
GetACP
GetTickCount
lstrcmpiA
WaitNamedPipeW
DeleteFileW
CompareStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE