NEAS[.]b8704e46c829e5e54275774bb06489c0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b8704e46c829e5e54275774bb06489c0.exe
Size

797KB
MD5

b8704e46c829e5e54275774bb06489c0
SHA1

bf3160cfe5aff4231bf5e2adb4095f132f0c2add
SHA256

3a7c6d69b9b1ab46fae592ee616dd907a55e6305c2c198f032006e582afd436e
SHA512

c848b442ea0d692f96fac2d043e677f32715615f1e94a9b43a658f07520aa627abf12fd0b491e828b070603fdd2b9770cc08fea169b190a6a9d423ca20cba025
SSDEEP

12288:HPn4m+GansclKzzYo8yiShCYHykpY+BetVEvmLsSyXRQhr2R4rStJ1D97wcPY1Ay:H/4DGtzzRhUXxZ6Jge/Z9eQZeZBZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b8704e46c829e5e54275774bb06489c0.exe

Files

NEAS.b8704e46c829e5e54275774bb06489c0.exe
.exe windows:4 windows x86

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 612KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

6
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

8
Size: 46KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 612KB - Virtual size: 611KB

1 Size: 6KB - Virtual size: 5KB

2 Size: - Virtual size: 3KB

3 Size: 10KB - Virtual size: 9KB

4 Size: - Virtual size: 16B

5 Size: 512B - Virtual size: 24B

6 Size: - Virtual size: 39KB

7 Size: 111KB - Virtual size: 111KB

8 Size: 46KB - Virtual size: 71KB

9 Size: 3KB - Virtual size: 3KB

10 Size: 7KB - Virtual size: 28KB

0
Size: 612KB - Virtual size: 611KB

1
Size: 6KB - Virtual size: 5KB

2
Size: - Virtual size: 3KB

3
Size: 10KB - Virtual size: 9KB

4
Size: - Virtual size: 16B

5
Size: 512B - Virtual size: 24B

6
Size: - Virtual size: 39KB

7
Size: 111KB - Virtual size: 111KB

8
Size: 46KB - Virtual size: 71KB

9
Size: 3KB - Virtual size: 3KB

10
Size: 7KB - Virtual size: 28KB