NEAS[.]ef32f448fabb4354bede4b7f503fc7e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ef32f448fabb4354bede4b7f503fc7e0.exe
Size

54KB
MD5

ef32f448fabb4354bede4b7f503fc7e0
SHA1

d305de3cbbbcf96422307fabd0be25a080ee5a0d
SHA256

26ca8c659bb74a65ee9e8197f332b3b159fedd3a23ae9f20da4eadf530884269
SHA512

f80a47c14c9e4cc94976a32f2139118cda9afcd506e058b819279d37b723371f2ee8e5268bfe0f0be03b1aea9e3d1eff2259d683e6abd5bdb18f07f3d618c549
SSDEEP

1536:MP8TaFOD33a/WPIcy68K47YDIFn+PqRhOy:MPgHa/iyK4HFn+Pty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ef32f448fabb4354bede4b7f503fc7e0.exe

Files

NEAS.ef32f448fabb4354bede4b7f503fc7e0.exe
.exe windows:5 windows x86

2c8ee6e4b72205184967666cb030c585

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
lstrcpyA
GetProcAddress
CloseHandle
VirtualAlloc
MapViewOfFileEx
VirtualFree

user32

LoadIconA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

11
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

12
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

13
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

14
Size: 512B - Virtual size: 15B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

15
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

16
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c8ee6e4b72205184967666cb030c585

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 44KB

10 Size: 512B - Virtual size: 8B

11 Size: 512B - Virtual size: 11B

12 Size: 512B - Virtual size: 13B

13 Size: 512B - Virtual size: 18B

14 Size: 512B - Virtual size: 15B

15 Size: 512B - Virtual size: 14B

16 Size: 512B - Virtual size: 14B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 440B

.text
Size: 3KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 44KB

10
Size: 512B - Virtual size: 8B

11
Size: 512B - Virtual size: 11B

12
Size: 512B - Virtual size: 13B

13
Size: 512B - Virtual size: 18B

14
Size: 512B - Virtual size: 15B

15
Size: 512B - Virtual size: 14B

16
Size: 512B - Virtual size: 14B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 440B