NEAS[.]ddde2f95c4bd419aebb9ff3267fe04b0[.]exe

General

Target

NEAS.ddde2f95c4bd419aebb9ff3267fe04b0.exe
Size

210KB
MD5

ddde2f95c4bd419aebb9ff3267fe04b0
SHA1

99fa0df9a37e8ce1e028ce543615b7b3dfc1e476
SHA256

38d088f80af5b8dfda9cd1f74a72743d98ae692a5ca616eea0e5309e5c5768a2
SHA512

bb59412373795d0e34697219107c9a2a46d3e3bccaed462eab2d57326223085c804509b857c27e5495dc57c4058171910ddaa666a7c0607fb763d1401abd145e
SSDEEP

3072:xmynTRXtDGLk7Hpv1s+/0sVfPuwsdYIEmzYh0o7hzhz4lTuxWhZc4WqOv0f2GgE:x9ZtDS0FXt72zYh0M3z+ZI0us

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddde2f95c4bd419aebb9ff3267fe04b0.exe

Files

NEAS.ddde2f95c4bd419aebb9ff3267fe04b0.exe
.exe windows:4 windows x86

0206130715adf551f163f94f13c433e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerA
CreateMenu
DrawIconEx
DrawTextA
EnumWindows
FindWindowA
GetDC
GetDCEx
GetWindowThreadProcessId
InsertMenuA
OemToCharA
PostQuitMessage
SetWindowPlacement
TrackPopupMenu
UnhookWindowsHookEx
wsprintfA

gdi32

AddFontResourceA
CopyMetaFileW
CreateBrushIndirect
CreateCompatibleBitmap
CreateDIBPatternBrushPt
EnumFontFamiliesExW
ExtCreatePen
ExtFloodFill
FrameRgn
GetClipBox
GetDeviceCaps
GetEnhMetaFileHeader
GetRegionData
SaveDC
SetMapperFlags
SetROP2
SetStretchBltMode
SetTextColor
SetWindowOrgEx
StrokePath
TextOutA

kernel32

CompareStringW
CopyFileA
GetCurrentProcess
GetEnvironmentStringsW
GetFileSize
GetModuleHandleW
GetStartupInfoA
GetWindowsDirectoryA
GlobalUnlock
InterlockedCompareExchange
OpenProcess
SetEndOfFile
SetEvent
lstrcmpiA

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

zCHrU5eD
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0206130715adf551f163f94f13c433e0

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 99KB - Virtual size: 99KB

.rsrc Size: 18KB - Virtual size: 17KB

zCHrU5eD Size: 1024B - Virtual size: 120KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 18KB - Virtual size: 17KB

zCHrU5eD
Size: 1024B - Virtual size: 120KB