NEAS[.]4cc7bb76471df53be287584dc4592ae0[.]exe

General

Target

NEAS.4cc7bb76471df53be287584dc4592ae0.exe
Size

139KB
MD5

4cc7bb76471df53be287584dc4592ae0
SHA1

dadcbca8738820c5d7d7a9d1d01374700a2a2fe8
SHA256

d17af555fcc1da54490aa774fa4c6bef027b507d64b116a82d4f7797fe35423c
SHA512

4f41ba94dfe88fa3f174c5f4cf71dc5d617d6dd23d5b6a0e867c4a4fb603a35e855c7e21aba2dd60b8cb8cf31fe87276a9909488e896fb5fdad2eabf20925b1c
SSDEEP

3072:MQ0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H8wvrvWiDQipJZOPnnN5wJVW:rlArDRDk2E+EIFB9H8WlDQInOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4cc7bb76471df53be287584dc4592ae0.exe

Files

NEAS.4cc7bb76471df53be287584dc4592ae0.exe
.exe windows:4 windows x86

91d57720a119d8b9f099deec4276c60b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry

user32

DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 471B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sncrxzu
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

irdgevp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

91d57720a119d8b9f099deec4276c60b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 471B

.data Size: 45KB - Virtual size: 45KB

.rsrc Size: 1KB - Virtual size: 29KB

sncrxzu Size: 4KB - Virtual size: 32KB

irdgevp Size: - Virtual size: 4KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 471B

.data
Size: 45KB - Virtual size: 45KB

.rsrc
Size: 1KB - Virtual size: 29KB

sncrxzu
Size: 4KB - Virtual size: 32KB

irdgevp
Size: - Virtual size: 4KB