NEAS[.]487540fe0b9b2deb3d36ff1f941c2560[.]exe

General

Target

NEAS.487540fe0b9b2deb3d36ff1f941c2560.exe
Size

81KB
MD5

487540fe0b9b2deb3d36ff1f941c2560
SHA1

5e91656f439b34d0cb12f35a73c84cea62111b53
SHA256

cd0e0c09b61a9cbb3b118c1c62122a2a162df9570c80542868abc2a77d9ea01b
SHA512

79bc6bbd9923574e7f8a26f3abe1612073a597b1d231d3755c3005ee83b19f088b6a07a66448cdd72d87635372c73a459c4401a7c1702c4aef92caf2ff9cbbf2
SSDEEP

1536:b1PvKv0h4NFTp8bqEKQJ2OdloVDfjnokT+lH0Ouds8RBXs7RDF61ho:bhQ0hageExJfloR/+0jmyc7RD01ho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.487540fe0b9b2deb3d36ff1f941c2560.exe

Files

NEAS.487540fe0b9b2deb3d36ff1f941c2560.exe
.exe windows:4 windows x86

0c7c7eb1ac4729e480cc1db17f22f7e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgCreateDocfile
CoSuspendClassObjects
OleInitialize
CoUninitialize
OleCreate
CoInitialize

kernel32

InterlockedDecrement
CreateFileA
SetStdHandle
CreateDirectoryA
VirtualAlloc
CopyFileA
ResetEvent
VirtualProtect
VirtualFree
SetSystemTimeAdjustment
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c7c7eb1ac4729e480cc1db17f22f7e0

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 349KB

.rsrc Size: 512B - Virtual size: 72KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 349KB

.rsrc
Size: 512B - Virtual size: 72KB