NEAS[.]7676971ccd33762ba627264d344cf940[.]exe

General

Target

NEAS.7676971ccd33762ba627264d344cf940.exe
Size

40KB
MD5

7676971ccd33762ba627264d344cf940
SHA1

b350d79b7a2351b1ee601e5ae2f60d59915f9e98
SHA256

53a6a6f044edab000df6176d550ffd1ebc8ec2b68d31dc09913e60029e9e4e1b
SHA512

05a99f4e41c9d2722b1bdaf266738e6a320381dc8a71f3c2dd570431f85f3a9ebd5d74216da90251be0a42eb85a8665e7745e06d0a4738bdf5a36f2b369565ae
SSDEEP

768:Q0dJykTCSV8p8pP8kjdeE7O+aqJo3Jyce:1z3xJ8SeE7fTo3J5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7676971ccd33762ba627264d344cf940.exe

Files

NEAS.7676971ccd33762ba627264d344cf940.exe
.exe windows:4 windows x86

77fc0ab898b3c3bdfa10821c2537bbbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
lstrcmpiA
CreateProcessA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetLastError
SetEnvironmentVariableA
SetCurrentDirectoryA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
lstrcmpA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
CloseHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetStdHandle

user32

MessageBoxA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77fc0ab898b3c3bdfa10821c2537bbbb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB