NEAS[.]24f45b9af270013044ad622b47d1cef0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.24f45b9af270013044ad622b47d1cef0.exe
Size

5.2MB
MD5

24f45b9af270013044ad622b47d1cef0
SHA1

7a677e1252cb0f9d84051bb699775f226a6a9ce9
SHA256

bc560ef932bc2dbce40be7e0b7830217af80961f1aa2f3b1dc3d0f06c75d536a
SHA512

0f8162740e1dfd5040c6dc1c04471a7dbbcdc8f3370b69fe7ac2a05f16a94e844839333386a7ba4e08e3d157fa96411226c9d82f939fee15a50e16a6f13bbc69
SSDEEP

98304:5Q3Uemal+OQVVn9s0H0qt8Ie+pwPqFSXBF:sUemal+O0n9s0H0w8Ie+pwPqFSXB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.24f45b9af270013044ad622b47d1cef0.exe

Files

NEAS.24f45b9af270013044ad622b47d1cef0.exe
.exe windows:4 windows x86

60632648dd1423076dfdd3be1804e10e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

winmm

timeBeginPeriod

ntdll

NtWaitForSingleObject

kernel32

VirtualAlloc
VirtualFree
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetThreadPriority
SetWaitableTimer
SuspendThread
WaitForSingleObject
WriteFile
LocalAlloc
LocalFree

msvcrt

_iob
abort
free
fwrite
malloc
memcpy
memset
_beginthread

Exports

Exports

_cgo_allocate
_cgo_panic
crosscall2

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 211B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/18
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/30
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/43
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 512B - Virtual size: 91B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 193B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60632648dd1423076dfdd3be1804e10e

Headers

File Characteristics

Imports

advapi32

winmm

ntdll

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.data Size: 104KB - Virtual size: 159KB

/4 Size: 512B - Virtual size: 211B

/18 Size: 191KB - Virtual size: 190KB

/30 Size: 152KB - Virtual size: 151KB

/43 Size: 695KB - Virtual size: 694KB

/55 Size: 227KB - Virtual size: 226KB

/71 Size: 85KB - Virtual size: 84KB

/87 Size: 4KB - Virtual size: 3KB

/102 Size: 512B - Virtual size: 91B

.idata Size: 1024B - Virtual size: 1006B

.edata Size: 512B - Virtual size: 193B

.symtab Size: 512B - Virtual size: 193B

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 104KB - Virtual size: 159KB

/4
Size: 512B - Virtual size: 211B

/18
Size: 191KB - Virtual size: 190KB

/30
Size: 152KB - Virtual size: 151KB

/43
Size: 695KB - Virtual size: 694KB

/55
Size: 227KB - Virtual size: 226KB

/71
Size: 85KB - Virtual size: 84KB

/87
Size: 4KB - Virtual size: 3KB

/102
Size: 512B - Virtual size: 91B

.idata
Size: 1024B - Virtual size: 1006B

.edata
Size: 512B - Virtual size: 193B

.symtab
Size: 512B - Virtual size: 193B