NEAS[.]5d70a9194b6768bc844f76c173369a20[.]exe

General

Target

NEAS.5d70a9194b6768bc844f76c173369a20.exe
Size

586KB
MD5

5d70a9194b6768bc844f76c173369a20
SHA1

7d0a89afbc6f16b09cdb14aba0ac3a4e546c1d2b
SHA256

5ce4fd3ef859ff558d048c1d9e074883075a137c3d22010998a0128d230be1f8
SHA512

f7cc171fa50e567405aa52b1b511cd5a8614c58af7d8e588ff01a16b4c5e565e3dfe5194645b031e6de34ac1ad4b77f27045e64c37f1532c1b07264e97506dc0
SSDEEP

12288:GkFTVJ2lDVsapG+tY1gNESzvyc6L7BdaEkjcm7DENqd7mLlO/BrHEMJCU/gkBO9q:bFTVJ6sLo2QmR9WFdV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5d70a9194b6768bc844f76c173369a20.exe

Files

NEAS.5d70a9194b6768bc844f76c173369a20.exe
.exe windows:4 windows x86

96b0d544ef7682f3a8a9fdb38d764d7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetVersionExA
GetProcAddress
LoadLibraryA
GetFullPathNameA
GetTimeFormatA
GetDateFormatA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
RaiseException
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
CloseHandle
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
ExitProcess
MultiByteToWideChar
ReadFile
SetFilePointer
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
VirtualAlloc
HeapSize
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 372KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96b0d544ef7682f3a8a9fdb38d764d7b

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 372KB - Virtual size: 369KB

.rdata Size: 92KB - Virtual size: 89KB

.data Size: 116KB - Virtual size: 122KB

.text
Size: 372KB - Virtual size: 369KB

.rdata
Size: 92KB - Virtual size: 89KB

.data
Size: 116KB - Virtual size: 122KB