NEAS[.]31df48baf6bbf1c5e0701dd8d3c667a0[.]exe

General

Target

NEAS.31df48baf6bbf1c5e0701dd8d3c667a0.exe
Size

236KB
MD5

31df48baf6bbf1c5e0701dd8d3c667a0
SHA1

0ed4b55f9571d34121923e333d2b6527b48f8683
SHA256

16530e813232fff31b16721f2874820c0532d91d9c50bc2528e7f430c494a268
SHA512

56fff3b4530cab5d55fe62ceb7c63354e6be43b2395a0a5367b2850c5402fe2265f47a925f9188f4fd457b9e6dc3804f22b8cd99b522a17ca4bfb7573089fbc8
SSDEEP

6144:Ju3x+LuTGt2hJxsNPqspduEQmRnPX5/LVfY:q4Lht2hjwR/HnP5LJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31df48baf6bbf1c5e0701dd8d3c667a0.exe

Files

NEAS.31df48baf6bbf1c5e0701dd8d3c667a0.exe
.exe windows:5 windows x86

7975595747f9a7e960edd841dd7a0e3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
TerminateProcess
CheckRemoteDebuggerPresent
CreateThread
lstrcpyA
SwitchToThread
GetModuleHandleW
Sleep
GetStartupInfoW
GetProcessHeap
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
ExitProcess

user32

GetDesktopWindow

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

opengl32

glEnable
glLightfv
glLineWidth
glPolygonMode
glViewport
glMatrixMode
glBlendFunc
glColor3d
glBegin
glDisable
glLineStipple
glVertex3d
glEnd
glPointSize
glOrtho
glClear
glLoadIdentity

wintrust

WinVerifyTrust

msvcrt

__set_app_type
exit
_XcptFilter
_exit
__wgetmainargs
_initterm
_except_handler3
_controlfp
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_wcmdln

version

VerQueryValueA

secur32

LsaEnumerateLogonSessions
LsaFreeReturnBuffer

d3d9

Direct3DCreate9

winscard

SCardReleaseContext
SCardEstablishContext

Exports

Exports

_Getta@4

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7975595747f9a7e960edd841dd7a0e3d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

opengl32

wintrust

msvcrt

version

secur32

d3d9

winscard

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 223KB - Virtual size: 223KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 223KB - Virtual size: 223KB