NEAS[.]4c41971dafe3aa3236fa9c11409feba0[.]exe

General

Target

NEAS.4c41971dafe3aa3236fa9c11409feba0.exe
Size

92KB
MD5

4c41971dafe3aa3236fa9c11409feba0
SHA1

14d407f169ab46b2539540302ab54771546ad776
SHA256

ea88345c68d4ca4465eaae84e4fec1fdf42871f92a6147034b1cbc0810b2c139
SHA512

f89f5a46d1ed828dc2799aa7162c98d2631eb29eb7c95e36e485103d483b0dbcbcfb6130434e4d5fdea50a517bf2f06d2ad07aeeff8b65ecafd0da6cab2f2e66
SSDEEP

1536:nmEwTuYO284b7ouU7MT/Zenq/aHm4L7HgZnx6N8HlgUoP7n0Z:mEJe8IThenqCHm4XAZnxQ8HlgUoP7n0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c41971dafe3aa3236fa9c11409feba0.exe

Files

NEAS.4c41971dafe3aa3236fa9c11409feba0.exe
.dll windows:4 windows x86

224f5ab43692f06b61f1b90ff21c22b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
GetLastError
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetEndOfFile

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

224f5ab43692f06b61f1b90ff21c22b1

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 24KB - Virtual size: 38KB

.data Size: 8KB - Virtual size: 5KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 24KB - Virtual size: 38KB

.data
Size: 8KB - Virtual size: 5KB