NEAS[.]d5c4b0015d7cacb5ed7ee334846903b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5c4b0015d7cacb5ed7ee334846903b0.exe
Size

909KB
MD5

d5c4b0015d7cacb5ed7ee334846903b0
SHA1

f7defc22eebd65dda53753355d8525308d5af7ce
SHA256

9856b14c1f2176a22f60eebc73e042922c4cf69a6d1fc22e240af9d01a662b7f
SHA512

6e0ae89a228a870c9d9cf45b14cc0f566ff2b9d64eba064d99028aead03b84f45075b57210aaeb9cc7e1d257c74c679dc5680c9de0a8cbea30cfc4332964ffb2
SSDEEP

12288:jmHS5KUA7HF8NdGMVZbOdNroDoJutiVxHYyy9UH/2LNPMVU:jmy5KUAedGMVcfruipx4F9f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5c4b0015d7cacb5ed7ee334846903b0.exe

Files

NEAS.d5c4b0015d7cacb5ed7ee334846903b0.exe
.exe windows:6 windows x64

69676b442fa4607bda0f65d14eb60084

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
GetCurrentThreadId
GlobalSize
SetEndOfFile
HeapSize
WriteConsoleW
HeapReAlloc
FlushFileBuffers
SetStdHandle
LCMapStringW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStringTypeW
GetConsoleCP
RtlPcToFileHeader
SetFilePointerEx
ReadConsoleW
GetConsoleMode
DeleteCriticalSection
GetFileType
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetModuleHandleW
IsValidCodePage
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
WriteFile
GetStdHandle
WideCharToMultiByte
GetModuleHandleExW
ExitProcess
GetProcessHeap
GetCommandLineW
DeleteFileW
RtlLookupFunctionEntry
LoadLibraryExW
ExitThread
CreateThread
DecodePointer
EncodePointer
RtlUnwindEx
IsProcessorFeaturePresent
IsDebuggerPresent
HeapAlloc
HeapFree
LoadLibraryExA
FreeLibrary
GetLocalTime
RaiseException
GetModuleFileNameW
GetVersionExA
GetTickCount
GetTempPathW
SetFilePointer
ReadFile
CreateFileW
VerifyVersionInfoW
WritePrivateProfileStringW
GetLastError
VerSetConditionMask
GetPrivateProfileStringW
GetPrivateProfileIntW
GetProcessAffinityMask
ResumeThread
GetCurrentProcess
WaitForSingleObject
CloseHandle
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GetACP
GlobalAlloc

user32

DrawIconEx
GetWindowThreadProcessId
IsRectEmpty
WindowFromPoint
GetCursor
GetCursorPos
IsZoomed
AttachThreadInput
SystemParametersInfoW
SystemParametersInfoA
LoadCursorW
FindWindowW
OffsetRect
IntersectRect
SetCursor
ShowCursor
MessageBoxW
DrawTextW
GetActiveWindow
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
SetWindowLongW
GetWindowLongW
DestroyIcon
LoadIconW
SetParent
FillRect
ClientToScreen
MessageBeep
InvalidateRect
EndPaint
BeginPaint
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetSubMenu
DestroyMenu
LoadMenuW
GetSystemMetrics
EnableWindow
KillTimer
SetTimer
GetKeyState
CreateDialogParamW
BringWindowToTop
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
ScreenToClient
GetWindowRect
PostMessageW
SetRect
GetClientRect
GetParent
SetWindowTextW
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItem
EndDialog
IsWindowVisible
SendMessageW
LoadStringW
ReleaseDC
GetDC
GetIconInfo

gdi32

GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDCOrgEx
SetStretchBltMode
StretchDIBits
SetBkColor
SelectPalette
SelectObject
RealizePalette
GetClipBox
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateDCW
SetTextColor
SetBkMode
GetStockObject
GetSystemPaletteEntries
GetDeviceCaps
DeleteObject
CreatePalette
GetObjectW

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69676b442fa4607bda0f65d14eb60084

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 311KB - Virtual size: 311KB

.rdata Size: 212KB - Virtual size: 212KB

.data Size: 7KB - Virtual size: 25KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 41KB - Virtual size: 40KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 311KB - Virtual size: 311KB

.rdata
Size: 212KB - Virtual size: 212KB

.data
Size: 7KB - Virtual size: 25KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 41KB - Virtual size: 40KB

.reloc
Size: 2KB - Virtual size: 1KB