NEAS[.]b79774254149f924eb03ac8aced27d60[.]exe

General

Target

NEAS.b79774254149f924eb03ac8aced27d60.exe
Size

337KB
MD5

b79774254149f924eb03ac8aced27d60
SHA1

235280cd3b1e90e0bb8daa3f438508b6ff67dca1
SHA256

2499885f605ffbfe80d4a67d75f8f5810220daf28aa4d475c200dd2fa67b06aa
SHA512

5f05c54329acc4b3c4693a58447958d1d31de1907790e429690a9a97f2605e815dd799e626ed1f5a7b86bb2195f5d98d89e828d7926e1c49082989c7f0192258
SSDEEP

6144:Uy15QiQ+g3Upe/caDNYS8M/Ne0kLExB+Eg8W2kQtutHyiyxWhA:U25QrjZ/PYSp2KljLkQcyZ8q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b79774254149f924eb03ac8aced27d60.exe

Files

NEAS.b79774254149f924eb03ac8aced27d60.exe
.exe windows:5 windows x86

2a92bd86690fed48448e1bddc3333e16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
GetDriveTypeW
GetCPInfo
GetCommandLineW
GetACP
GetFileType
FindResourceW
GetSystemTime
ExitProcess
SizeofResource
MultiByteToWideChar
GetLastError
GetLocaleInfoW
GetOEMCP
GetStringTypeW
IsValidCodePage
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
Sleep
FreeEnvironmentStringsW
WideCharToMultiByte

user32

GetWindowTextW
GetWindowRgn
GetWindowRect
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetMessageW
IsDlgButtonChecked
GetKeyNameTextW
SetWindowPos
SetMenuDefaultItem
RedrawWindow
GetGUIThreadInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
FindWindowW
FillRect
EndDialog
EnableWindow
DrawTextW
CheckDlgButton
AppendMenuW
DestroyIcon
DeleteMenu
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
DialogBoxParamW
CreateWindowExW
CreatePopupMenu
DialogBoxIndirectParamW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
MapWindowPoints
MessageBoxW
SetWindowRgn
SetWindowTextW
ShowWindow
WindowFromPoint
wsprintfW
SystemParametersInfoW
TrackPopupMenu
GetMenu

gdi32

GetStockObject
SetTextColor
SelectObject
GetDeviceCaps
ExtTextOutW
EqualRgn
CreateCompatibleDC
CombineRgn
DeleteDC
SetBkMode
SetBkColor
CreateRectRgn
GetTextExtentPoint32W

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a92bd86690fed48448e1bddc3333e16

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 330KB - Virtual size: 330KB

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 330KB - Virtual size: 330KB