NEAS[.]d4afbc36088d89b031a19ca8678404d0[.]exe

General

Target

NEAS.d4afbc36088d89b031a19ca8678404d0.exe
Size

56KB
MD5

d4afbc36088d89b031a19ca8678404d0
SHA1

a0f9b09465654402a216d3c34ebf66f2a94ddf24
SHA256

89d11e6060fa54cced15281b6529447182ef1b8f22855a4356c0afb6cb393712
SHA512

59f33159b5f8d6226855c5bd13cc812fd6fdfdc4ec5a6e5a81e60d04ba64aa1af0a6da84a2cf69e51fc2976e32f90168b88701325775a24eabe3580606c74d41
SSDEEP

768:zMefn8/c1tHedvQafrjrpHzM+ejHbP9b1ZeKYL1qtsc:zB8/c1ZeTfLpHz0jbV1Iet5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d4afbc36088d89b031a19ca8678404d0.exe

Files

NEAS.d4afbc36088d89b031a19ca8678404d0.exe
.exe windows:4 windows x86

00467cec757381dfa97bc7db9cb807a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

kernel32

DeleteCriticalSection
FlushFileBuffers
CloseHandle
CreateFileA
GetPrivateProfileIntA
GetModuleFileNameA
HeapSize
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

shell32

ShellExecuteA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00467cec757381dfa97bc7db9cb807a9

Headers

File Characteristics

Imports

shlwapi

wininet

kernel32

shell32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 2KB