NEAS[.]de2fdd7dcf1be6110b6141f31d531450[.]exe

General

Target

NEAS.de2fdd7dcf1be6110b6141f31d531450.exe
Size

91KB
MD5

de2fdd7dcf1be6110b6141f31d531450
SHA1

2352a1c5933a3056c0da4e93ca2474a5259f31c3
SHA256

ef598c2936412eea25433a88e87c8a2a72b4192c3f65f4a9a7dc51e39fcbd0e8
SHA512

9125332d9aa7d116b1a2b0216f5edfe0e85345e519c5e9f134e12d2e3f34c6a384a1d4f083c5de099577aa1a3c49d3b1f246937196ce2d80d8eb7e9cddf0afe0
SSDEEP

1536:rJuZMCqXEK7u9bJAEF5djaQtcQ3deJdk14DIUbmCqMI4:VuZMCq0iYb6A5dRBeJdsYlI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.de2fdd7dcf1be6110b6141f31d531450.exe

Files

NEAS.de2fdd7dcf1be6110b6141f31d531450.exe
.exe windows:1 windows x86

4f325a4c7048a14e1ee7bee798f59ef1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
LocalAlloc
SetHandleCount
GetModuleHandleW
QueryPerformanceFrequency
GetThreadContext
Module32First
CompareStringA
ExitProcess
HeapFree
ExpandEnvironmentStringsA
FreeLibrary
SetThreadAffinityMask
lstrlenA
FindClose
WriteConsoleW
GetModuleHandleA
GetStartupInfoA
WriteConsoleA
GetEnvironmentStringsW
GlobalReAlloc
WideCharToMultiByte
GetFileType
LCMapStringA
Module32Next

user32

GetDlgItem
GetDlgCtrlID
CheckMenuRadioItem
SetDlgItemTextA
DrawEdge
GetWindowDC
BeginDeferWindowPos
GetSysColor
wsprintfA
GetClientRect
CheckDlgButton
DrawMenuBar
GetSystemMetrics
EnumWindows
MsgWaitForMultipleObjects
RegisterClassExA
DispatchMessageA
SetMenuItemInfoA

gdi32

CreateRectRgnIndirect
RectInRegion
CreateCompatibleBitmap
SetTextAlign
RestoreDC
Polyline
SetBkMode
SetBkColor
GetTextMetricsA
DeleteObject
GetStockObject
GetBkMode
CreatePen
BitBlt
CreateRectRgn
GetTextExtentPoint32A

msvcrt

_wremove
_exit
_cexit
_controlfp
_mbsnicmp
_fputchar
fwrite
is_wctype
__p__commode
__p__fmode
_except_handler3
memmove
_adjust_fdiv
_wgetenv
isspace
_acmdln
_wfopen
_umask
_snprintf
__setusermatherr
_wcstoui64
_nextafter
setbuf
_heapused
wcscat
_initterm
_adj_fdiv_m32i
_XcptFilter
__set_app_type
_wcsncoll
_adj_fptan
_toupper
memcpy
strcpy
log
_wstrdate
__getmainargs
exit
_utime64
_mbsnccnt
_wfreopen
_mbschr

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f325a4c7048a14e1ee7bee798f59ef1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 316KB

.rsrc Size: 61KB - Virtual size: 60KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 316KB

.rsrc
Size: 61KB - Virtual size: 60KB