NEAS[.]64d08f26fad23c32fba33e8731237260[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64d08f26fad23c32fba33e8731237260.exe
Size

184KB
MD5

64d08f26fad23c32fba33e8731237260
SHA1

af5ebd98b78f5e67c29931dd4761dcff7330378a
SHA256

1bf27f44cb150e39c75a41be10aae5605eba895b503a5caedc58630811a3e93e
SHA512

5d0f632c286f35d23cb26a58dbb365815488fdacf4b2282f2dce5927c5998485fdd002e11d22105f20ff7abce5970641ce37ddcc52e173ef07b70ad4259991e9
SSDEEP

768:fTYqxYABUjy57xl4XbKK0ldiZ+BTHhP9ZKliB9ek1b18bxGrnowAuZ:fTYUYABUjyN4XR+dhFUWbw8owX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64d08f26fad23c32fba33e8731237260.exe

Files

NEAS.64d08f26fad23c32fba33e8731237260.exe
.exe windows:4 windows x86

94e694ef57b3c458168028265ff9ce98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
TerminateThread
ResumeThread
SuspendThread
FreeResource
GlobalFree
WriteFile
ReadFile
GlobalAlloc
CreateFileA
GetSystemDirectoryA
GetLogicalDriveStringsA
GetCurrentDirectoryA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetDriveTypeA
FindFirstFileA
MultiByteToWideChar
CreateThread
RemoveDirectoryA
DeleteFileA
LCMapStringW
LCMapStringA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
HeapReAlloc
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
SetCurrentDirectoryA
WinExec
SetStdHandle
HeapFree
CreateDirectoryA
HeapAlloc
VirtualFree
HeapCreate
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersion
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetLastError
GetProcAddress
HeapDestroy

user32

FindWindowA
RegisterClassA
CreateWindowExA
LoadIconA
DialogBoxParamA
EnableWindow
GetDC
DefWindowProcA
LoadCursorA
EndDialog
GetDlgItem
SetWindowTextA
SendMessageA
UnregisterClassA
SetFocus
SetDlgItemTextA
MessageBoxA

gdi32

StretchDIBits
GetStockObject

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderPathA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

shlwapi

PathIsDirectoryA

winmm

timeGetTime

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94e694ef57b3c458168028265ff9ce98

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

shlwapi

winmm

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 76KB

.rsrc Size: 132KB - Virtual size: 130KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 76KB

.rsrc
Size: 132KB - Virtual size: 130KB