NEAS[.]dac03d8975932170b6190eea58f93640[.]exe

General

Target

NEAS.dac03d8975932170b6190eea58f93640.exe
Size

813KB
MD5

dac03d8975932170b6190eea58f93640
SHA1

b36ae35374ba05f18ca303e9c225c8c72d161f71
SHA256

340b2dafa26f053c48c31c746997b93ba82cb575fdcd8d284a23b0d5fc3c7cd5
SHA512

473651fe45918289ec9940da98c98423c17f17628cab9ee21dc598edffd17d9084d093d76554b721c3a428990a1be433a146aec43dbfef55bcbe82477a529f1e
SSDEEP

12288:QWLWRk5m5zqNBAfGTmOARAi4MBWmgdoznMxhDeZpP7r/LJNRsT023RSFfm07Ljg3:Mem5LoGAi4MBBz2Kt/lBMQ9XjgsWnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dac03d8975932170b6190eea58f93640.exe

Files

NEAS.dac03d8975932170b6190eea58f93640.exe
.exe windows:4 windows x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 259KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 268KB - Virtual size: 265KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 12KB - Virtual size: 32KB

.rsrc Size: 32KB - Virtual size: 28KB

pebundle Size: 259KB - Virtual size: 260KB

pebundle Size: 8KB - Virtual size: 8KB

pebundle Size: 153KB - Virtual size: 156KB

pebundle Size: 8KB - Virtual size: 8KB

.text
Size: 268KB - Virtual size: 265KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 12KB - Virtual size: 32KB

.rsrc
Size: 32KB - Virtual size: 28KB

pebundle
Size: 259KB - Virtual size: 260KB

pebundle
Size: 8KB - Virtual size: 8KB

pebundle
Size: 153KB - Virtual size: 156KB

pebundle
Size: 8KB - Virtual size: 8KB