NEAS[.]2655c76791c1fb09d2636763e86c5cc0[.]exe

General

Target

NEAS.2655c76791c1fb09d2636763e86c5cc0.exe
Size

38KB
MD5

2655c76791c1fb09d2636763e86c5cc0
SHA1

dfcf75709d0446fe7f3c7c5f94203ed1e50a5990
SHA256

d95e203a0a31158a96a91673f9fce518fa5f4348b7d79522b009f74bfd247db2
SHA512

22115c339ef67749bef5aba534f7d93e3e62ac20fe9edc93226141a1f3783213a9c7baedfbce6814e4f0355edbbd969aa4cdb670008fbdf838f1bdb3055b9a22
SSDEEP

384:VapYBpF4o1Nt2yf83IPiQKDW3iqis9QlcffyqGe2:VapeFTNtq+risKl4qR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2655c76791c1fb09d2636763e86c5cc0.exe

Files

NEAS.2655c76791c1fb09d2636763e86c5cc0.exe
.exe windows:4 windows x86

85026d0e3a84667eea500cd0b28cc94b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiClassGuidsFromNameExA
SetupDiCreateDeviceInfoListExA
SetupDiGetClassDevsA
SetupDiOpenDeviceInfoA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInfoListDetailA
CM_Get_Device_ID_ExA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA

mfc42

ord823
ord825

msvcrt

free
_mbsstr
_mbctoupper
_mbstok
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_mbsicmp
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_mbctolower
_mbschr
_mbsnbicmp
__setusermatherr
_ismbcalpha
malloc

kernel32

GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
FindFirstFileA
SetFileAttributesA
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindNextFileA
lstrlenA
GetCurrentDirectoryA
DeleteFileA
VerSetConditionMask
VerifyVersionInfoA
GetLastError

user32

CharNextA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85026d0e3a84667eea500cd0b28cc94b

Headers

File Characteristics

Imports

setupapi

mfc42

msvcrt

kernel32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 18KB - Virtual size: 18KB