NEAS[.]ed6ba499b285780f488abd80b3651030[.]exe

General

Target

NEAS.ed6ba499b285780f488abd80b3651030.exe
Size

70KB
MD5

ed6ba499b285780f488abd80b3651030
SHA1

8dab63d1b7ee1efdf061eb5e4c0661c858af2819
SHA256

bb0b5efcb0e99d3e444f7b1847d070dec1cec5ae40eca1615f49fbe1cc3b7940
SHA512

16a5b37c52ee499d83fb6f5f49ebbf8dc6ecd54e94510b1d98cee02382f219c24695299d01965b685c57e4f4cce4ee4bf1aa4d849aca742b648a5a497bd585dd
SSDEEP

1536:jnumM10XeW3Go2FeiVKXp3MW7skqDCiMxn5oH+54tx:WoOeiMx5L54tx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ed6ba499b285780f488abd80b3651030.exe

Files

NEAS.ed6ba499b285780f488abd80b3651030.exe
.exe windows:5 windows x86

0e311247bd562d5f4de6110e4d691db2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hge

hgeCreate

kernel32

GetCurrentProcessId
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
HeapAlloc
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle
FlushFileBuffers

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e311247bd562d5f4de6110e4d691db2

Headers

DLL Characteristics

File Characteristics

Imports

hge

kernel32

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B