NEAS[.]5da88a10c2db2d699745755f063f4b40[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5da88a10c2db2d699745755f063f4b40.exe
Size

125KB
MD5

5da88a10c2db2d699745755f063f4b40
SHA1

9e2ebc7e7fa68f28c396356df1fba6a683192efa
SHA256

1c4af36bfec185942e620b1f82e102782cde96e9388d6d75f3568b1d7b58e421
SHA512

abae6d66c78372de94492d7de91cd9ebaef51a8c9a1dcfd778363805b95f7a5a57fa9e8a8c4f7a9cdbfbb67f7a3f9669423a8e929a47d78e45ea5eaa86110b1f
SSDEEP

1536:zcPdwIG1cnbCo87UADi7wRxNko01dSIkQXCyypXSlJnxpvnc1r5LSOU/nkG4FmH/:gWI7URxNkMITpvnW5Mnj5kgwGX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5da88a10c2db2d699745755f063f4b40.exe

Files

NEAS.5da88a10c2db2d699745755f063f4b40.exe
.exe windows:4 windows x86

6ab5ff7887182592423456833a6b6003

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
IsProcessorFeaturePresent
ConvertDefaultLocale
SetThreadAffinityMask
TlsGetValue
FoldStringA
EnumSystemLanguageGroupsA
GetDateFormatA
SleepEx
GetProfileStringA
GetCurrentDirectoryW
DuplicateHandle
FindCloseChangeNotification
LocalCompact
GetCurrencyFormatW
AssignProcessToJobObject
CommConfigDialogA
CreateDirectoryW
EnumResourceLanguagesW
InitializeCriticalSection
GetCommMask
GetCPInfoExA
IsBadWritePtr
GetThreadContext
OpenSemaphoreW
SetFileApisToANSI
GetStringTypeExA

user32

CallWindowProcA
GetCapture
SetForegroundWindow
CharNextA
MenuItemFromPoint
DestroyMenu
GetDCEx
GetMessageExtraInfo
SendMessageTimeoutW
DdeSetUserHandle
GetKeyboardLayoutNameW
SetWindowsHookW
DrawTextExW
GetScrollPos
CreateAcceleratorTableW
GetTopWindow
IsDialogMessageW
UnpackDDElParam
DrawTextW
GetScrollRange
GetKeyNameTextW
DestroyIcon
DdeUnaccessData
LoadAcceleratorsW
GetClassLongA
RegisterClipboardFormatA
MessageBoxA
LoadKeyboardLayoutW
TrackMouseEvent
SetClipboardViewer
GetWindowPlacement
SetWindowLongA
SetKeyboardState
DdeInitializeA
GetWindowWord
FillRect
TranslateMessage
ClipCursor
ScreenToClient
IntersectRect
GetShellWindow
OpenInputDesktop
LoadCursorW
EnumPropsA
SendIMEMessageExA
GetGuiResources
GetSubMenu
RemoveMenu
GetWindowTextA
CharToOemW
GetLastActivePopup
FindWindowExW
GetMenuStringA
DeferWindowPos
GetMenuBarInfo
OpenWindowStationW
LockSetForegroundWindow
GetActiveWindow
ToUnicode
RealGetWindowClassW
DrawStateW
SetRectEmpty
GetMenuInfo
UnloadKeyboardLayout
DdeSetQualityOfService
RegisterWindowMessageA
DlgDirListW
SetDlgItemInt
OffsetRect
CheckDlgButton
DdeCreateDataHandle
WaitMessage
SetClipboardData
OemToCharBuffA
PostThreadMessageW
IMPGetIMEW
AppendMenuW
CharLowerA
GetProcessWindowStation
GetUserObjectInformationW
LoadBitmapW
GetMenuContextHelpId
GetClassInfoExW
IMPSetIMEW
DdeConnect
GetParent
MonitorFromRect
IsIconic
DdeAbandonTransaction
VkKeyScanA

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ab5ff7887182592423456833a6b6003

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 43KB - Virtual size: 47KB

.rsrc Size: 1KB - Virtual size: 72KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 43KB - Virtual size: 47KB

.rsrc
Size: 1KB - Virtual size: 72KB