NEAS[.]1c40d0274b87167858b2d2becfa01df0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.1c40d0274b87167858b2d2becfa01df0.exe
Size

245KB
MD5

1c40d0274b87167858b2d2becfa01df0
SHA1

bba5dc750e782754ac452e0148cdf99fc5849630
SHA256

8eded0e1f6f05d4b92d55affc095eb0e79a11fe914435ace5efc944697b19c68
SHA512

d6fea78399fe9462020f5bfcfde822112ada828db444baef160acc90ed35e362b7219a2d337dfba3f71d80b47f10ea594771ebcf8e5afbd9f39fe45b1ccdc47e
SSDEEP

1536:qHEn+1AQIXTsY7Zf7ZXLYbLOAC+nKMzRocQTDa:8EkA/XbZT8dKMz6cQTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c40d0274b87167858b2d2becfa01df0.exe

Files

NEAS.1c40d0274b87167858b2d2becfa01df0.exe
.dll windows:5 windows x86

a9748329eacf375ba2349255f098cb02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
CreateFileA
WriteFile
WideCharToMultiByte
WriteConsoleA
MultiByteToWideChar
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateEventA
SetEvent
LoadLibraryA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
HeapSize
ExitProcess
GetStdHandle
SetHandleCount

Exports

Exports

GetBuffering
GetCanSeek
GetError
GetEventName
GetItemInfo
GetLength
GetPause
GetPlay
GetPosition
GetRTError
GetReady
GetResume
GetSignaled
GetSpeed
GetState
GetStereo
GetStop
GetVolume
SetBuffering
SetCanSeek
SetError
SetItemInfo
SetLength
SetPause
SetPlay
SetPosition
SetRTError
SetReady
SetResume
SetSpeed
SetState
SetStereo
SetStop
SetVolume

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SharedSt
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9748329eacf375ba2349255f098cb02

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 13KB

SharedSt Size: 155KB - Virtual size: 155KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 13KB

SharedSt
Size: 155KB - Virtual size: 155KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 8KB - Virtual size: 8KB