NEAS[.]e8d162751dcd2a7045d357c4392061f0[.]exe

General

Target

NEAS.e8d162751dcd2a7045d357c4392061f0.exe
Size

282KB
MD5

e8d162751dcd2a7045d357c4392061f0
SHA1

e394abbad98e9c388c49f4506e96f61b9cb7b933
SHA256

335f117e7f0d5e84d625b8175002b126ac1c92af8ab2fd883bca84d11c262b4b
SHA512

e4f359f787e40bd57255b522e5ba38fd855a03c9a5d86af742f8a71630fc20e545205114238ad508bb729aa85998da9ab038576c3b96a3d1aec1d39f1660a415
SSDEEP

3072:sZ4lt2IVY2/AJqracLtyaeVuarxjUMpNF0Rom1T7oux405mvybfku5:sZ4lgxGI6RSuCxwMpNupdx4Fv25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e8d162751dcd2a7045d357c4392061f0.exe

Files

NEAS.e8d162751dcd2a7045d357c4392061f0.exe
.exe windows:5 windows x86

66bc811ac894535ffcee36d78d1ccd29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
Sleep
CreateThread
lstrlenW
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetCPInfo
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
HeapReAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileA

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qrzav
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

66bc811ac894535ffcee36d78d1ccd29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 105KB - Virtual size: 105KB

.qrzav Size: 11KB - Virtual size: 11KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 142KB - Virtual size: 150KB

.text
Size: 105KB - Virtual size: 105KB

.qrzav
Size: 11KB - Virtual size: 11KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 142KB - Virtual size: 150KB