NEAS[.]758cc20101f31c78944bf675cb2781a0[.]exe

General

Target

NEAS.758cc20101f31c78944bf675cb2781a0.exe
Size

80KB
MD5

758cc20101f31c78944bf675cb2781a0
SHA1

801e21f8129fa3a6280932d3c3c6ab4ce1601554
SHA256

ca97656235e409725b327e0df520018e92c00b196e6cc18608e962996bbd2ad7
SHA512

95da7f2a7885f74ba0dfb8b604470c624c7672a91eaa5ca282b6fbb2f8380c6ce6c6dd4d66203e005c4070b46690e3e076e83f80bf8375ac3f9006917f306e20
SSDEEP

768:qb0v/0SwEvi0HOnAWM23I9hwXcmZbkNinK2iFu1rGRNzxeoUs:qbeD1ZHdxYeinJiFuAPsoUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.758cc20101f31c78944bf675cb2781a0.exe

Files

NEAS.758cc20101f31c78944bf675cb2781a0.exe
.exe windows:4 windows x86

7dc0fce44156867b417599602bb45712

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
__WSAFDIsSet
closesocket
send
accept
recv
inet_addr
WSACleanup
WSAStartup
socket
bind
listen
htonl
connect
gethostbyname
setsockopt
htons
getservbyname

kernel32

SetEnvironmentVariableA
FlushFileBuffers
WriteFile
CompareStringA
SetEndOfFile
CompareStringW
GetStringTypeW
GetStringTypeA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetProcAddress
GetOEMCP
LoadLibraryA
GetLastError
CreateMutexA
CloseHandle
CreateProcessA
TerminateProcess
GetCurrentProcess
GetCPInfo
CreateFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCurrentProcessId
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetEnvironmentStrings
SetCurrentDirectoryA
GetEnvironmentStringsW
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
SetHandleCount
GetACP
HeapSize
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetUnhandledExceptionFilter
IsBadCodePtr
HeapCreate
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
VirtualFree
GetFileAttributesA
SetStdHandle
VirtualAlloc
IsBadWritePtr

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc0fce44156867b417599602bb45712

Headers

File Characteristics

Imports

ws2_32

kernel32

advapi32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 12KB - Virtual size: 8KB