NEAS[.]3d6355268ae5c135b95a197a5c575330[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3d6355268ae5c135b95a197a5c575330.exe
Size

320KB
MD5

3d6355268ae5c135b95a197a5c575330
SHA1

0440d43e83326c6868eb9983459524d45519e66d
SHA256

23a51be6d92494e77d1e7cd3bbc1cf291256283b7d13f33e444b1f4029cf4cef
SHA512

df2b9ba7edd4ae1d1b4025de94718463fe27d655540e941f8ba2cfa89edd8100ccfc897fdf06e9eea28c4213c3e60fcc2a95b1a2ee5594621fb0961beeaac6c6
SSDEEP

6144:SyMWrs0O3ZIVa3PR4zuO6M/xt7DLA/Gz99wvd0qBK:CWrPlVs5fO6Mpt74/G9Rq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3d6355268ae5c135b95a197a5c575330.exe

Files

NEAS.3d6355268ae5c135b95a197a5c575330.exe
.dll windows:4 windows x86

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Draw
ImageList_Read

gdi32

SetPixel
SaveDC
CreatePalette
CopyEnhMetaFileA
GetBitmapBits
CreateCompatibleBitmap
CreateBitmap
SelectPalette

version

GetFileVersionInfoSizeA

kernel32

LocalAlloc
GetProcAddress
GetModuleHandleW
GetCommandLineA
lstrlenA
GetModuleHandleA
GlobalAlloc
ExitThread
IsBadReadPtr
ExitProcess
VirtualAllocEx
GetVersionExA
LoadLibraryA

Sections

CODE
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES2
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES4
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

Imports

comctl32

gdi32

version

kernel32

Sections

CODE Size: 109KB - Virtual size: 108KB

.data Size: 191KB - Virtual size: 190KB

RES1 Size: 1KB - Virtual size: 1KB

RES3 Size: 512B - Virtual size: 508B

RES9 Size: 2KB - Virtual size: 2KB

RES5 Size: 2KB - Virtual size: 1KB

RES2 Size: 512B - Virtual size: 481B

RES7 Size: 2KB - Virtual size: 1KB

RES4 Size: 1024B - Virtual size: 517B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 636B

CODE
Size: 109KB - Virtual size: 108KB

.data
Size: 191KB - Virtual size: 190KB

RES1
Size: 1KB - Virtual size: 1KB

RES3
Size: 512B - Virtual size: 508B

RES9
Size: 2KB - Virtual size: 2KB

RES5
Size: 2KB - Virtual size: 1KB

RES2
Size: 512B - Virtual size: 481B

RES7
Size: 2KB - Virtual size: 1KB

RES4
Size: 1024B - Virtual size: 517B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 636B