NEAS[.]c307bb07c203d6430e69a7aca69d6960[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c307bb07c203d6430e69a7aca69d6960.exe
Size

36KB
MD5

c307bb07c203d6430e69a7aca69d6960
SHA1

304869417d5fa6ce392fcbb3cdcd4cb1552c6289
SHA256

8190d8f98baf7f316d4edc1b3396f350171dc9e4a2354d29fc58130e70e0133d
SHA512

4a0df72fe47614564e1155eb2e1fcc9f2ab4cfb3bf0e983b52732c0076dd770769a1fe2e93799b71f980024ff3bb3a3e0438aafc07c0e7640c8d20e1333c4e6c
SSDEEP

768:TxE+WeDbKvtFztJ7bngut005se1nQGnrCvWU:TiwDYtROs1drCuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c307bb07c203d6430e69a7aca69d6960.exe

Files

NEAS.c307bb07c203d6430e69a7aca69d6960.exe
.exe windows:5 windows x86

48856a963069247899a5c1e0610d6331

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
SetThreadPriority
CreateThread
GetProfileStringA
GetProfileIntA
LocalAlloc
WriteProfileStringA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetStartupInfoA
CreateEventA
WaitForSingleObject
GetCurrentProcessId
WaitForMultipleObjects
CloseHandle
LocalFree
ExitThread

msvcrt

_except_handler3
strstr
strncpy
_stricmp
_c_exit
_exit
_XcptFilter
_cexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit

gdi32

DeleteObject
MoveToEx
GetStockObject
CreateFontA
SetBkColor
LineTo

user32

SetCursor
GetClassNameA
GetDlgItemTextA
GetWindowTextA
wvsprintfA
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
LoadIconA
GetMenu
GetSystemMetrics
GetWindowRect
DestroyAcceleratorTable
DestroyWindow
CheckMenuItem
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
CreateDialogParamA
PostMessageA
SendMessageA
EnableMenuItem
EnableWindow
GetDlgItem
PostQuitMessage
DestroyIcon
ReleaseCapture
MapWindowPoints
GetCursorPos
SetCapture
DispatchMessageA
LoadCursorA
InvalidateRect
EndPaint
FillRect
DrawIcon
IsIconic
BeginPaint
GetWindowTextLengthA
SetWindowTextA
SetFocus
GetFocus
MessageBoxA
wsprintfA
DialogBoxParamA
GetClientRect
SetWindowPos
ShowWindow
GetWindow

rpcrt4

NdrClientCall2
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
I_RpcExceptionFilter
RpcBindingFree

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48856a963069247899a5c1e0610d6331

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

rpcrt4

Sections

.text Size: 27KB - Virtual size: 26KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 5KB - Virtual size: 8KB

.text
Size: 27KB - Virtual size: 26KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 5KB - Virtual size: 8KB