NEAS[.]a269e9be160ac2b0a083b8753341ad50[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a269e9be160ac2b0a083b8753341ad50.exe
Size

197KB
MD5

a269e9be160ac2b0a083b8753341ad50
SHA1

343211ae236be73b1d624d736e174b711309f7ab
SHA256

1ba975857e39407a0cfb67118895b946b46fc246bcf0b31a22904b1f83b18d51
SHA512

196f4733f772d0966bb0716d38192dbb63a94b346e636da909cfecaecd96712fc88d29a9e07a65ed72a0c4a8cf07a72f02109a170161926de8ed831e16ffc893
SSDEEP

3072:ammxfw6GSziZ1Aha4zaBJkCnvoum7/0+aaQpJla:4twhSyOa4+B+r70+ypm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a269e9be160ac2b0a083b8753341ad50.exe

Files

NEAS.a269e9be160ac2b0a083b8753341ad50.exe
.exe windows:4 windows x86

9949f3fdf5afd871c7dafe13dfea33ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LoadLibraryA
GetTimeZoneInformation
CreateFileA
DeleteFileA
OutputDebugStringA
Sleep
GetLastError
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
CreateDirectoryA
GetProcAddress
CloseHandle
GetExitCodeProcess
CreateProcessA
HeapReAlloc
RtlUnwind
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
RaiseException
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
IsBadWritePtr
HeapSize
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
UnhandledExceptionFilter
FlushFileBuffers
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
ReadFile

user32

WaitForInputIdle
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateMessage
DispatchMessageA
EndDialog
SetTimer
CreateDialogParamA
DestroyWindow
DialogBoxParamA
MessageBoxA
SetForegroundWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
SendMessageA
GetDlgItem

gdi32

DeleteObject
CreateFontA

comctl32

ord17

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

evvtzcl
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9949f3fdf5afd871c7dafe13dfea33ce

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

wininet

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 9KB - Virtual size: 15KB

.rsrc Size: 36KB - Virtual size: 37KB

evvtzcl Size: - Virtual size: 4KB

.trdata Size: 60KB - Virtual size: 60KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 9KB - Virtual size: 15KB

.rsrc
Size: 36KB - Virtual size: 37KB

evvtzcl
Size: - Virtual size: 4KB

.trdata
Size: 60KB - Virtual size: 60KB