NEAS[.]374a127a8de5624126cbe82a3709d7e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.374a127a8de5624126cbe82a3709d7e0.exe
Size

351KB
MD5

374a127a8de5624126cbe82a3709d7e0
SHA1

dd13824b7d4426444f769e07c13246d6378a8178
SHA256

533244648c622a2a230ee57e5d11daf0b009edbab10ad42979b603694ca919d9
SHA512

4697620c7c6c2a9e00d2f1e0a56315da527fe30ee617cd7b9f67c014a85b4d1edb274b88365848529898dcacf92531feab5f0433a457c3817c419b84be5daed6
SSDEEP

6144:Q0YDbKIDD8SeFQ/E5JM/GTzcTAN4Ud0shAhLxaPnllkkqbYxqjxtnuq:Q0YDtDD8STE5JMSzc0dBK+0kUnu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.374a127a8de5624126cbe82a3709d7e0.exe

Files

NEAS.374a127a8de5624126cbe82a3709d7e0.exe
.exe windows:5 windows x86

d75b6be0189f939631a577bfc2b0952b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetStdHandle
GetFileType
CloseHandle
CompareStringW
CompareStringA
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileA
GetTimeZoneInformation
SetEnvironmentVariableA

user32

MessageBoxA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 246KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d75b6be0189f939631a577bfc2b0952b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 10KB

.reloc Size: 246KB - Virtual size: 248KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 10KB

.reloc
Size: 246KB - Virtual size: 248KB