NEAS[.]39022eff0b28bdfe77897a0fc5ff4920[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
NEAS.39022eff0b28bdfe77897a0fc5ff4920.exe
Size 308KB
Sample231026-bb2atsac54
SHA256 7af525c73aaddfe3f532acc545ee8044bae61fff536cffe4db15edf5b5e92454
MD5 39022eff0b28bdfe77897a0fc5ff4920
SHA1 fffaea32c7e1c83e96fc8d195d78e03029a133ec
SHA512 34474156dfdc2a99ae95f1af4e185a235065f0181ad9badc83fc61cad9439209753181f14757a0f5c8ddff844677eb06dd34576bf9a4657be5a401797afef2b0
SSDEEP 6144:QMrudbcDdgFhMYFKLy6EQSXL0tLJj99VoftBbxSeTXnUwU2:QfHB+ZSXL0RJJeTxSIXnA2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.39022eff0b28bdfe77897a0fc5ff4920.exe

File Explorer

NEAS.39022eff0b28bdfe77897a0fc5ff4920.exe

.exe 308KB

NEAS.39022eff0b28bdfe77897a0fc5ff4920.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 7af525c73aaddfe3f532acc545ee8044bae61fff536cffe4db15edf5b5e92454
MD5 39022eff0b28bdfe77897a0fc5ff4920
SHA1 fffaea32c7e1c83e96fc8d195d78e03029a133ec
SHA512 34474156dfdc2a99ae95f1af4e185a235065f0181ad9badc83fc61cad9439209753181f14757a0f5c8ddff844677eb06dd34576bf9a4657be5a401797afef2b0
SSDEEP 6144:QMrudbcDdgFhMYFKLy6EQSXL0tLJj99VoftBbxSeTXnUwU2:QfHB+ZSXL0RJJeTxSIXnA2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode