NEAS[.]08c8aed8676981b3d448dad3060847b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08c8aed8676981b3d448dad3060847b0.exe
Size

156KB
MD5

08c8aed8676981b3d448dad3060847b0
SHA1

0e670174a75d1da61b72decb4876dadaa2a7dc77
SHA256

be0cac5dff454aa836a0d4e8cbb09c767a5eca4fbc7d60d6c04d4203817d37c9
SHA512

05017acaf016db9064a46e36697885e0300fb62c5f70ce4e83e4466dbe9a7dbb0e0957711cde8593aca3e05852214c7672eb770a3172833b2d742d700f127d22
SSDEEP

3072:wZPlgt9/jh07UE2d1vd8R/Ytmmmm2mmEmmmmmmmEmmmmmmmm/mmmmemmmmmmmmms:wZdg7a7UE2Pl6Snbkp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08c8aed8676981b3d448dad3060847b0.exe

Files

NEAS.08c8aed8676981b3d448dad3060847b0.exe
.dll windows:5 windows x86

7c44796bf7952c62a07ebd93d63de3a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ntohl

kernel32

GetModuleFileNameA
LocalFree
LocalAlloc
InterlockedDecrement
GetProcAddress
GetLastError
SetEvent
ResetEvent
CloseHandle
CreateEventA
LoadLibraryA
lstrlenA
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
EncodePointer
DecodePointer
MultiByteToWideChar
HeapFree
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
HeapAlloc
RaiseException
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW

oleaut32

VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c44796bf7952c62a07ebd93d63de3a6

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

oleaut32

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 68KB - Virtual size: 75KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 68KB - Virtual size: 75KB

.reloc
Size: 4KB - Virtual size: 4KB