NEAS[.]713d50d24b35cda42426326d1a6dab50[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.713d50d24b35cda42426326d1a6dab50.exe
Size

96KB
MD5

713d50d24b35cda42426326d1a6dab50
SHA1

94706ed74c4f8d223b9084a4f96ebc453f1dde0d
SHA256

20ca5e9db2e9667ff136c0c30d996abf906ea7100fa1e92e20450e579f744002
SHA512

c7bc1cf84255bd55cb31f0e1dba4d3189db97700cc8220535c21fed63022932f7c79b5557ece294c797bf5ccd7585af297356bc458038870f67cb85f54d73e5c
SSDEEP

768:E449pGnCDlLB+QKg/6PDSfiIbR0iaTeovZQ7HRpot8uODDKnCIFAH4if:y9pGWL+ZgEMnNaTek+DotE5IFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.713d50d24b35cda42426326d1a6dab50.exe

Files

NEAS.713d50d24b35cda42426326d1a6dab50.exe
.exe windows:4 windows x86

9d511374788b5d69a3d490aa703423d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetLocaleInfoA
GetSystemDefaultLCID
GetSystemDefaultLangID
GetVersion
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CopyFileA
GetFileAttributesA
SetFileAttributesA
CreateFileA
GetLastError
CloseHandle
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
MultiByteToWideChar
GetCurrentDirectoryA
SetCurrentDirectoryA
FormatMessageA
GetCurrentProcess
LocalFree
GetCPInfo
CreateProcessA
WaitForSingleObject
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
ReadFile
SetFilePointer
GetExitCodeProcess
SetEndOfFile

user32

LoadStringA
ExitWindowsEx
MessageBoxA

advapi32

AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
GetTokenInformation

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d511374788b5d69a3d490aa703423d1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 32KB - Virtual size: 32KB