NEAS[.]2b2480b872fc1188156f518e90f7c110[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.2b2480b872fc1188156f518e90f7c110.exe
Size

408KB
MD5

2b2480b872fc1188156f518e90f7c110
SHA1

8af455d41302c712d042d2d225ca4e1953d9f4c5
SHA256

39e7c393eb5a80fcf040278db43dd84e9b21b7f2edbec800b5433f9b813b1aaf
SHA512

3ca7479b7c7f65d0ba49a4b07d1486cdd3a5e7954f07c09c9dd959fc37acff0b360f9f34589385796bd74fd3adc9fff0b4357fdadd47e3480674d1a1d27da51d
SSDEEP

6144:BGvOeBzbOoGGwf/O4loAGSfOmKVWPXPcXIgBV+UdvrEFp7hKMkB:BGvOqUf/O4loAokgBjvrEH7+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b2480b872fc1188156f518e90f7c110.exe

Files

NEAS.2b2480b872fc1188156f518e90f7c110.exe
.dll windows:4 windows x86

eb6f072e09ffe4ce6eeeb9c21fe319fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexA
WaitForSingleObject
ReleaseMutex
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
GetTickCount
GetProcessHeap
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
GetSystemInfo
QueryPerformanceCounter
GetModuleFileNameA
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ReadFile
SetFilePointer
CloseHandle
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetActiveWindow
GetCapture
GetClipboardOwner
GetClipboardViewer
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
GetCaretPos
GetCursorPos

Exports

Exports

KSC_ASYM_Decrypt
KSC_ASYM_Encrypt
KSC_ASYM_GenParam
KSC_ASYM_Param_Delete
KSC_ASYM_Param_New
KSC_ASYM_Sign
KSC_ASYM_Verify
KSC_CM_ErrorString
KSC_CM_SelfTest
KSC_CM_StateChange
KSC_CM_StateFinal
KSC_CM_StateInfo
KSC_CM_StateInit
KSC_CM_Version
KSC_HMAC
KSC_HMAC_Final
KSC_HMAC_Init
KSC_HMAC_Update
KSC_Hash
KSC_Hash_Final
KSC_Hash_Init
KSC_Hash_Update
KSC_KEY_CheckKeyPair
KSC_KEY_GenKeyPair
KSC_KEY_GenSecKey
KSC_KEY_PriKey_Delete
KSC_KEY_PriKey_New
KSC_KEY_PubKey_Delete
KSC_KEY_PubKey_New
KSC_Rand
KSC_SYM_Decrypt
KSC_SYM_Decrypt_Final
KSC_SYM_Decrypt_Init
KSC_SYM_Decrypt_Update
KSC_SYM_Encrypt
KSC_SYM_Encrypt_Final
KSC_SYM_Encrypt_Init
KSC_SYM_Encrypt_Update

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb6f072e09ffe4ce6eeeb9c21fe319fe

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 56KB - Virtual size: 59KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 56KB - Virtual size: 59KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 12KB - Virtual size: 10KB