NEAS[.]e422f7f1afdce7ce1e4dc67bcb40a6d0[.]exe

General

Target

NEAS.e422f7f1afdce7ce1e4dc67bcb40a6d0.exe
Size

40KB
MD5

e422f7f1afdce7ce1e4dc67bcb40a6d0
SHA1

22d56f1273489889f09788f09804d37649fa2dbc
SHA256

49542a5f547440be5fdd0b834ddb727d7883a5bca5d6a037a27fe02e4ef61f3f
SHA512

cc1c28ca4ecf5207a612e7b657572399891c707f471a9fed75688bb90f4f4eda65027966af2d47ae7a2073ee29728792d8e5caf57b50dcb1ebff01e388e09d78
SSDEEP

384:kZfn4H4iS9XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:8fn4YLTQGPL4vzZq2o9W7GsxBbPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e422f7f1afdce7ce1e4dc67bcb40a6d0.exe

Files

NEAS.e422f7f1afdce7ce1e4dc67bcb40a6d0.exe
.exe windows:4 windows x86

9d592b29ae2b7b183a4c6032b1a0566b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
DeleteFileA

advapi32

RegCloseKey
RegDeleteKeyA
RegOpenKeyA

mfc42

ord561
ord815
ord800
ord2818
ord1168
ord537
ord4160
ord540
ord1575

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
__dllonexit
__CxxFrameHandler
_splitpath
_onexit

msvcp60

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�E/��u�
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9d592b29ae2b7b183a4c6032b1a0566b

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 460B

.rsrc Size: 4KB - Virtual size: 160B

�E/��u� Size: 20KB - Virtual size: 20KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 460B

.rsrc
Size: 4KB - Virtual size: 160B

�E/��u�
Size: 20KB - Virtual size: 20KB