NEAS[.]fb4872597bd9e1cde68f9fdeb8c66d70[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb4872597bd9e1cde68f9fdeb8c66d70.exe
Size

196KB
MD5

fb4872597bd9e1cde68f9fdeb8c66d70
SHA1

2352876317377945b6bc52f22cae1ee16c9a408b
SHA256

60457dd6bd272e7a986e809d45cc156119b953df9e1ab4bd1a0a9cebb4b91220
SHA512

3123c89f5700267f59cd047bb53ddcf9ea8eaeabf688c14255c6e401afc0f734809702df4d930df9cd1843a3236899b5f5a5116b5e1bfab35c21d1595b0e5050
SSDEEP

6144:+k367Hqt2jycgL+rhHKKV2BsdZhgTj8N9BO:NiHKp+lrmsbhgTj8FO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb4872597bd9e1cde68f9fdeb8c66d70.exe

Files

NEAS.fb4872597bd9e1cde68f9fdeb8c66d70.exe
.exe windows:5 windows x86

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextW
wsprintfW
LoadIconW
DialogBoxParamW
ReleaseDC
SendDlgItemMessageW
SetCursor
MessageBoxW
EndDialog
LoadStringW
SetWindowLongW
GetDlgItemTextA
RegisterClipboardFormatW
GetParent
LoadCursorW
PostMessageW
SetFocus
GetWindowLongW
InsertMenuItemW
SystemParametersInfoW
WinHelpW
LoadBitmapW
EnableWindow
GetDlgItem
LoadImageW
GetDC
SendMessageW
SetWindowTextW

kernel32

WideCharToMultiByte
DeleteCriticalSection
IsValidCodePage
lstrcmpiW
OutputDebugStringW
GetStartupInfoA
GlobalUnlock
GetComputerNameW
LocalReAlloc
GetCPInfo
LoadLibraryW
CloseHandle
DeleteFileA
LocalFree
CreateFileW
GetCurrentProcess
InterlockedDecrement
GetEnvironmentStringsA
lstrlenW
SetUnhandledExceptionFilter
GetProcAddress
InitializeCriticalSection
GlobalLock
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
GlobalAlloc
IsBadReadPtr
GetTickCount
FileTimeToSystemTime
FormatMessageW
lstrcpyW
GetDateFormatW
OutputDebugStringA
GetModuleHandleA
GetSystemWindowsDirectoryW
QueryPerformanceCounter
FileTimeToLocalFileTime
SetLastError
InterlockedIncrement
GetLastError
GlobalFree

certcli

CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeFlags
CACloseCA
CACreateCertType
CAGetCertTypeFlags
CAGetCAProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAFreeCAProperty
CACloseCertType
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAAddCACertificateType
CASetCertTypeExtension
CAEnumCertTypes
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA

msvcrt

_adjust_fdiv
_wcsicmp
_purecall
wcsstr
vswprintf
wcstoul
_initterm
malloc
??1type_info@@UAE@XZ
wcschr
memmove
wcscpy
wcslen
__dllonexit
?terminate@@YAXXZ
_wcsupr
_onexit
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscat
free
mbstowcs
_except_handler3
??2@YAPAXI@Z
wcscmp

shell32

ShellExecuteW
ShellExecuteExW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 78KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

Imports

user32

kernel32

certcli

msvcrt

shell32

advapi32

gdi32

comctl32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 45KB - Virtual size: 44KB

.hdata Size: 78KB - Virtual size: 3.2MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 45KB - Virtual size: 44KB

.hdata
Size: 78KB - Virtual size: 3.2MB

.rsrc
Size: 3KB - Virtual size: 2KB