NEAS[.]9e0a42be0513f245ebbc14f8ff2ebd90[.]exe

General

Target

NEAS.9e0a42be0513f245ebbc14f8ff2ebd90.exe
Size

95KB
MD5

9e0a42be0513f245ebbc14f8ff2ebd90
SHA1

32c4650ac88a7ac92b44a5f611d5d5ff7542ff37
SHA256

d71ff0883f69cec2cacfc2976c1ce42bb60be3441aa1c78b4f7fc9525730f2a1
SHA512

8beb3ad1f47db8bc8891fbbbddd88ea593fb439da8606bc1a2b6fe007f7115815259706dae88f31a6678e3fd44959058e3340b9a20c6ce81d09f811faf21ef75
SSDEEP

1536:mm1pXg2r3XsyoRiiQfMvf2SpzAk4WpwgpyVU3E3ruxtedgMRIOzBpm1pXg2r9:xXgy8yoznfz5AkBoXrmeA8YXg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9e0a42be0513f245ebbc14f8ff2ebd90.exe

Files

NEAS.9e0a42be0513f245ebbc14f8ff2ebd90.exe
.exe windows:5 windows x86

b2c87e30ac29fd4e3024b6df9473add6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
lstrlen
GetUserDefaultLangID
SetThreadPriority
OpenMutexA
GetCPInfo
ReleaseSemaphore
SetFilePointer
GlobalAlloc
InterlockedIncrement
lstrcpynW
DeleteCriticalSection
GetCurrentProcessId
WriteFile
VirtualFree
CreateSemaphoreA
lstrcpynA
lstrcpyn
CreateDirectoryA
CompareStringW
lstrlenW
ResetEvent
SetEndOfFile
CreateThread
FreeLibrary
LeaveCriticalSection
UnmapViewOfFile
GetFileSize
GetEnvironmentStringsA
FindFirstFileA
LCMapStringW
GlobalFindAtomW
GetProcAddress
CloseHandle
LoadLibraryW
SetEvent
OutputDebugStringA
CreateFileA
MapViewOfFile
ReadFileEx
OpenSemaphoreA
GetLastError
RemoveDirectoryA
lstrcmpA
lstrlenA
WaitForSingleObjectEx
WriteFileEx
GetDiskFreeSpaceA
GetTickCount
EnterCriticalSection
GetModuleFileNameA
GetFileAttributesA
ReadFile
GetSystemDefaultLangID
FindClose
InterlockedDecrement
GetSystemInfo
GlobalFree
OpenEventA
lstrcpyA
FindNextFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2c87e30ac29fd4e3024b6df9473add6

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 474KB - Virtual size: 473KB

.reloc Size: 512B - Virtual size: 312B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 474KB - Virtual size: 473KB

.reloc
Size: 512B - Virtual size: 312B