NEAS[.]deea0e727b6c38657e4f0217c2127840[.]exe

General

Target

NEAS.deea0e727b6c38657e4f0217c2127840.exe
Size

176KB
MD5

deea0e727b6c38657e4f0217c2127840
SHA1

4fc26ea7e3465af6a5e8393bff52bfb411a646e2
SHA256

52b9f62a5e0e64cbc0549d90d4c03939dbaad54285cc015918b580f6fea0897f
SHA512

01a46eac375ed733f308a0c557951e11fac335d188e688c84096fca58ede5de155cb9dbcd065c2c74898460192d6159304ffc46cf239f9a40702fe803ac61c78
SSDEEP

3072:RcNnXuE5IbfHuZRdDdkVexWy5i/hEd7pVmA74eKmeK1Bnyo2w:qNnXzq7+ZWMjCid7p0a/eKLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.deea0e727b6c38657e4f0217c2127840.exe

Files

NEAS.deea0e727b6c38657e4f0217c2127840.exe
.exe windows:4 windows x86

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLocaleInfoW
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLastError
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
SetEnvironmentVariableA

shell32

ShellExecuteA

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 936B

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 936B