NEAS[.]67182585b2a9ce946de60c1d7c1302a0[.]exe

General

Target

NEAS.67182585b2a9ce946de60c1d7c1302a0.exe
Size

148KB
MD5

67182585b2a9ce946de60c1d7c1302a0
SHA1

3f7803e9f1ed0b7e3ee863b69abb7306afe33213
SHA256

1e654961cf84325cf3573750054eda075810c31dbbbd47e3fed2148559d6f5d2
SHA512

368d36d26f1b040cfad65e0afad4ac8ab04a2ad07873d8107836abc2e9c9201f915f6e743978faaee737b24cac063d59042f67f3035e6c9c6387fc2a0c1492ae
SSDEEP

3072:Zvu0ntz6zWpWf2cQyWHMJcwS2P6ZsZGuiFqfpNfcZAwxL0lRCfHLSePWZ:9VntmzWpFh7HQia6kGuiAjEpxglRIHGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.67182585b2a9ce946de60c1d7c1302a0.exe

Files

NEAS.67182585b2a9ce946de60c1d7c1302a0.exe
.exe windows:5 windows x86

ac7a160ca9da8cb80496233ba06b8e5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

query

??0CException@@QAE@XZ
CiSvcMain
?SystemExceptionTranslator@@YAXIPAU_EXCEPTION_POINTERS@@@Z

msvcrt

?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
__CxxFrameHandler
_CxxThrowException
_c_exit
_exit
_XcptFilter
_cexit
exit
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
_except_handler3
?terminate@@YAXXZ

advapi32

StartServiceCtrlDispatcherW

kernel32

SetErrorMode
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 58KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ac7a160ca9da8cb80496233ba06b8e5e

Headers

DLL Characteristics

File Characteristics

Imports

query

msvcrt

advapi32

kernel32

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 84B

.rsrc Size: 1024B - Virtual size: 984B

.data Size: 77KB - Virtual size: 128KB

.text Size: 58KB - Virtual size: 156KB

.data Size: 7KB - Virtual size: 7KB

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 84B

.rsrc
Size: 1024B - Virtual size: 984B

.data
Size: 77KB - Virtual size: 128KB

.text
Size: 58KB - Virtual size: 156KB

.data
Size: 7KB - Virtual size: 7KB