NEAS[.]279b7ea1058ddef6900c9f88c6fa97d0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.279b7ea1058ddef6900c9f88c6fa97d0.exe
Size

58KB
MD5

279b7ea1058ddef6900c9f88c6fa97d0
SHA1

e05603c21ae0d5255a0a6ea6f919e1c88bf5fac3
SHA256

29c15c416e17211fd877cab9253a4c86c7462a0aee8a4e8860249954cbcc64e0
SHA512

83a5212fd876e773fb279af1df4b8d41e87569546a4428d3ccb2d027852013b5b5c37c4d7bba4cc391edd5fc9c81a59793024b45a9247f332cc2e43e020f6786
SSDEEP

768:M8VCRp6PcuH5MTH1eqqH2sJNPX6QUxoEFQns:BVS6PtH5MTAjH2snLUaEFAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.279b7ea1058ddef6900c9f88c6fa97d0.exe

Files

NEAS.279b7ea1058ddef6900c9f88c6fa97d0.exe
.exe windows:4 windows x86

cf797c799a8b11c6d16b6cde5cc165a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
fputc
free
getenv
localeconv
malloc
memcpy
scanf
signal
strlen
wcslen

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 128B

IMAGE_SCN_MEM_DISCARDABLE

/19
Size: 512B - Virtual size: 235B

IMAGE_SCN_MEM_DISCARDABLE

/35
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE

/47
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

/61
Size: 1024B - Virtual size: 1003B

IMAGE_SCN_MEM_DISCARDABLE

/73
Size: 512B - Virtual size: 228B

IMAGE_SCN_MEM_DISCARDABLE

/86
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

/97
Size: 512B - Virtual size: 272B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

cf797c799a8b11c6d16b6cde5cc165a9

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 22KB - Virtual size: 21KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.idata Size: 1KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 128B

/19 Size: 512B - Virtual size: 235B

/35 Size: 5KB - Virtual size: 5KB

/47 Size: 1KB - Virtual size: 1KB

/61 Size: 1024B - Virtual size: 1003B

/73 Size: 512B - Virtual size: 228B

/86 Size: 2KB - Virtual size: 1KB

/97 Size: 512B - Virtual size: 272B

.text
Size: 22KB - Virtual size: 21KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 1KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 128B

/19
Size: 512B - Virtual size: 235B

/35
Size: 5KB - Virtual size: 5KB

/47
Size: 1KB - Virtual size: 1KB

/61
Size: 1024B - Virtual size: 1003B

/73
Size: 512B - Virtual size: 228B

/86
Size: 2KB - Virtual size: 1KB

/97
Size: 512B - Virtual size: 272B