NEAS[.]ddb7fffce0c4c7b48dd72e4ef3298370[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ddb7fffce0c4c7b48dd72e4ef3298370.exe
Size

138KB
MD5

ddb7fffce0c4c7b48dd72e4ef3298370
SHA1

ec252d155ebf7c998467e252e654c6f8f9346449
SHA256

1b1d79a41383d80555f1e64e6db396a0d945d8931491e350625d15ec5e7b9e73
SHA512

a81a46bae18220470c1dbafaa7c9ab4871b0c0ee85938555041ba7175aea1aeea6962be1e966b1b0392ca45152cb30d27d24599bca8ec48a956407bc6a6cb263
SSDEEP

3072:TE+lGh5CxmgCZ9Dy15K9wvlqdmuAYwPm:TEL5CxmBD+5pt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddb7fffce0c4c7b48dd72e4ef3298370.exe

Files

NEAS.ddb7fffce0c4c7b48dd72e4ef3298370.exe
.exe windows:4 windows x86

83109effcd17fa23c42eddac6b48122f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
GetBkColor

kernel32

GetTickCount
SizeofResource
GetProcessHeap
GetCurrentThread
GetUserDefaultLCID
GetVersion
GetVersionExA
GetDateFormatA
FreeResource
LoadResource
GetModuleHandleW
GetFileType
GetCurrentProcess
ExitProcess
IsBadReadPtr
HeapDestroy
LocalReAlloc
LoadLibraryA
VirtualAllocEx
GetACP
InitializeCriticalSection
WriteFile

user32

GetKeyboardLayoutList
GetTopWindow
GetSystemMenu
CharLowerA
SendMessageW
CharLowerBuffA
IsWindowEnabled
SetParent
SetWindowTextA
CharUpperBuffA
CreateMenu
GetClipboardData
PtInRect
GetKeyboardType
GetMenuItemInfoA
CallNextHookEx
IsCharUpperA
DrawMenuBar
GetForegroundWindow
PostMessageA
SetMenuItemInfoA
GetMenuStringA
DrawTextA
SetScrollRange
CharUpperA
SetWindowLongW
IsDialogMessageW
EnableWindow
DefMDIChildProcA
FillRect
RedrawWindow
GetMenu
IsWindow
SetClassLongA
DrawEdge
MessageBeep
GetKeyboardLayoutNameA
SetWindowPos
GetKeyboardState
RemoveMenu
CharNextA
MsgWaitForMultipleObjects
GetWindowLongA
UnregisterClassA
GetScrollPos
GetFocus
GetClientRect
MoveWindow
wsprintfA
GetScrollInfo
GetWindowDC
AdjustWindowRectEx
ShowOwnedPopups
IsChild
CharToOemA
SetScrollPos
GetMenuItemID
DestroyCursor
GetScrollRange
CharNextW
GetCapture
GetWindowLongW

ole32

OleRegGetUserType
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoRevokeClassObject
GetHGlobalFromStream
MkParseDisplayName
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CoUninitialize

Exports

Exports

_VkYVmgO

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83109effcd17fa23c42eddac6b48122f

Headers

File Characteristics

Imports

gdi32

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 11KB - Virtual size: 126KB

.data Size: 103KB - Virtual size: 103KB

.edata Size: 2KB - Virtual size: 1KB

.badata Size: 2KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 11KB - Virtual size: 126KB

.data
Size: 103KB - Virtual size: 103KB

.edata
Size: 2KB - Virtual size: 1KB

.badata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB