NEAS[.]132231aa2d6ce0ed97b3818b731e38e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.132231aa2d6ce0ed97b3818b731e38e0.exe
Size

2.2MB
MD5

132231aa2d6ce0ed97b3818b731e38e0
SHA1

1e6a6ea646586dcf586e40c0726adf67d5a1b047
SHA256

603c1dab310081c896a6efe33ed31d204cacb434eae489915bed1d0797af1247
SHA512

ea2966219ee421a8f12f5e3112909966fff7ea5c3434d3414b51c000eb24cc41736b3fd835598303cd8cff62813f15ed6c8fa6df6d73f054b70d82bd094d3ff4
SSDEEP

49152:oXeP5bLTQs0ogQG55QrBdOuU2OLdHus9f6cqEFhRUdf8fd:oXe9LTkq9dDUx/6cLlU6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.132231aa2d6ce0ed97b3818b731e38e0.exe

Files

NEAS.132231aa2d6ce0ed97b3818b731e38e0.exe
.dll windows:5 windows x86

07c45662915b7fd71b841d688749731f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mprapi

MprAdminTransportGetInfo

urlmon

CoInternetIsFeatureEnabledForUrl

advapi32

CryptSetProviderExW

setupapi

SetupDiClassNameFromGuidExA

user32

UnpackDDElParam
ScrollDC
RegisterClassA
PostQuitMessage

rpcrt4

RpcMgmtSetCancelTimeout

ole32

CreateILockBytesOnHGlobal

shell32

DoEnvironmentSubstW
DragQueryFileW
SHGetFolderPathAndSubDirW

kernel32

WaitForSingleObject
TlsFree
OpenFile
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetBinaryTypeW
GetModuleFileNameW
GetModuleFileNameA
SetEvent
InterlockedFlushSList
WaitForSingleObjectEx

winmm

midiOutReset

gdi32

ScaleWindowExtEx
OffsetWindowOrgEx
CreateCompatibleDC
StretchDIBits

Exports

Exports

KhhfyRlpie

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PACK
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07c45662915b7fd71b841d688749731f

Headers

DLL Characteristics

File Characteristics

Imports

mprapi

urlmon

advapi32

setupapi

user32

rpcrt4

ole32

shell32

kernel32

winmm

gdi32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 484KB - Virtual size: 481KB

.data Size: 76KB - Virtual size: 73KB

PACK Size: 252KB - Virtual size: 250KB

CODE Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 484KB - Virtual size: 481KB

.data
Size: 76KB - Virtual size: 73KB

PACK
Size: 252KB - Virtual size: 250KB

CODE
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 21KB