NEAS[.]32eae590923f5c2e4fa1d769900bebc0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.32eae590923f5c2e4fa1d769900bebc0.exe
Size

1.2MB
MD5

32eae590923f5c2e4fa1d769900bebc0
SHA1

c133592d29092010e0c97e5821c4d4c067696f9e
SHA256

2c6fb159b1744ecd959b17e849d47e727061df0920f7e98010fdeccbf3924e58
SHA512

6b91b105ed7a95e70b0df2a3ef82b2e215478869d4cdcf68038d336a25f0bfc7c00e084fb7d215164061c12bfc9fe9a84d379c2cc8373d98f1ab9455147411f0
SSDEEP

24576:TAWQaawm44nujozQWd+qThYZjNqtE6LdyA+tL:TVQIWukpdDTKZj0tbRyLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.32eae590923f5c2e4fa1d769900bebc0.exe

Files

NEAS.32eae590923f5c2e4fa1d769900bebc0.exe
.exe windows:1 windows x86

097f79270d353ee1c9da7231af12c530

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
FormatMessageA
lstrcmpA
GetLastError
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
lstrcmpiA
FreeLibrary
lstrcpyA
GetProcAddress
LoadLibraryA
FreeResource
LockResource
LoadResource
SizeofResource
CreateThread
LocalFree
lstrlenA
CreateFileA
RtlMoveMemory
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GlobalAlloc
GlobalFree
SetFileAttributesA
DeleteFileA
GetCurrentDirectoryA
GetTempPathA
GetFileAttributesA
GetDiskFreeSpaceA
GetVersionExA
FindResourceA
lstrcatA
SetCurrentDirectoryA
GetCommandLineA
GetVersion
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
GetModuleFileNameA
GetACP
ExitProcess
RtlUnwind
UnhandledExceptionFilter

gdi32

GetDeviceCaps

user32

SetWindowLongA
GetWindowLongA
MessageBeep
MessageBoxA
GetWindowRect
GetDC
ReleaseDC
SetWindowPos
DialogBoxParamA
SendMessageA
EnableWindow
GetDlgItemTextA
LoadStringA
SendDlgItemMessageA
GetDesktopWindow
SetDlgItemTextA
SetWindowTextA
CallWindowProcA
GetDlgItem
EndDialog
SetForegroundWindow

comctl32

ord17

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

097f79270d353ee1c9da7231af12c530

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 34KB - Virtual size: 34KB

.idata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 53B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 34KB - Virtual size: 34KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 53B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 3KB - Virtual size: 3KB