NEAS[.]4c2dceec02900a270e30bf769879e660[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4c2dceec02900a270e30bf769879e660.exe
Size

8KB
MD5

4c2dceec02900a270e30bf769879e660
SHA1

86adc5e23b0dc06a8d726520aced54b4541a8f1d
SHA256

f785ab76c959d69499e35af67e5682817e8454220bc3a5fbaf6c985556fd25b1
SHA512

76fc8d92c2004ee15018a9effa9075df4da25f932c5572f7c40693e502a84aa510633955bb81d2676ce82d1a6f914bd3da9cc5c6df7daec1a13ebf4c5ba29dc9
SSDEEP

96:IGolM0ER8mizikRLNy30F6/uZ1e4GiQdDTnh6OiKO:IGugCE30McMnh6Ou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c2dceec02900a270e30bf769879e660.exe

Files

NEAS.4c2dceec02900a270e30bf769879e660.exe
.dll windows:4 windows x64

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
RaiseException

Exports

Exports

AddLocalAlternateComputerNameW
BackupRead
BackupWrite
BindIoCompletionCallback
CopyFileA
CopyFileW
CreateFileMappingA
CreateFileTransactedW
CreateMailslotA
CreateNamedPipeA
CreateSemaphoreW
DnsHostnameToComputerNameW
DosDateTimeToFileTime
FatalAppExitA
FatalAppExitW
FileTimeToDosDateTime
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FindResourceA
FindResourceExA
FindResourceW
FindVolumeMountPointClose
GetComputerNameA
GetComputerNameW
GetConsoleWindow
GetDurationFormatEx
GetFileAttributesTransactedW
GetFirmwareType
GetMaximumProcessorGroupCount
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
GetNumaAvailableMemoryNodeEx
GetNumaNodeProcessorMask
GetNumaProcessorNodeEx
GetShortPathNameA
GetStartupInfoA
GetStringTypeExA
GetSystemPowerStatus
GetSystemWow64DirectoryA
GetSystemWow64DirectoryW
GetTapeParameters
GetTempPathA
GetThreadSelectorEntry
GlobalMemoryStatus
LoadLibraryA
LoadLibraryW
MoveFileA
MoveFileExA
MoveFileW
MulDiv
OpenFile
PowerClearRequest
PowerCreateRequest
PowerSetRequest
PulseEvent
RaiseFailFastException
RegisterWaitForSingleObject
SetConsoleTitleA
SetDllDirectoryW
SetFileCompletionNotificationModes
SetHandleCount
SetMailslotInfo
SetThreadIdealProcessor
SetVolumeLabelW
SetVolumeMountPointW
UnregisterWait
VerifyVersionInfoW
WTSGetActiveConsoleSessionId
WaitForMultipleObjects

Sections

.text
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

24b3d2952588080766f7fd68e6e8f755

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 368B

.rodata Size: 512B - Virtual size: 240B

.rdata Size: 512B - Virtual size: 96B

.pdata Size: 512B - Virtual size: 36B

.xdata Size: 512B - Virtual size: 20B

.edata Size: 4KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 160B

.text
Size: 512B - Virtual size: 368B

.rodata
Size: 512B - Virtual size: 240B

.rdata
Size: 512B - Virtual size: 96B

.pdata
Size: 512B - Virtual size: 36B

.xdata
Size: 512B - Virtual size: 20B

.edata
Size: 4KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 160B