NEAS[.]bf9ca26a1a046b90940e5beb236d7f00[.]exe

General

Target

NEAS.bf9ca26a1a046b90940e5beb236d7f00.exe
Size

26KB
MD5

bf9ca26a1a046b90940e5beb236d7f00
SHA1

3920695e7e0871eb5f089b04a06dc9e2dce0203d
SHA256

0f4a639df2ce0d75bb5928cbf011b080466212c5931e1937d8b0d5b59ad1a308
SHA512

2d6af2101a07112d2492d4a455eb22fdf5cf6fb82d2f8b3be01e6dc3b066d4fb1ba0213a926e78d572e243b474ecac1bb777952f7c49e941bf43310d54c278c0
SSDEEP

384:UItlYLkfSoxGMwIfUzAI7+U5Q1dg1T8FspEK8PfO211MQ6WlJthOkDJhenJ:U+CLZoyIm5HIFDJWQ6CCKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bf9ca26a1a046b90940e5beb236d7f00.exe

Files

NEAS.bf9ca26a1a046b90940e5beb236d7f00.exe
.exe windows:5 windows x86

7f712f2a919df3038830bf06da63a3d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
GetTextMetricsA
CreateFontA
RealizePalette

winmm

mciSendStringA

msacm32

acmStreamOpen

imm32

ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow

kernel32

GetModuleHandleA
CreateSemaphoreW
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f712f2a919df3038830bf06da63a3d5

Headers

File Characteristics

Imports

user32

gdi32

winmm

msacm32

imm32

kernel32

ole32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 6KB