NEAS[.]bf85bbabcc4aa28273d90c62efc1c1c0[.]exe

General

Target

NEAS.bf85bbabcc4aa28273d90c62efc1c1c0.exe
Size

320KB
MD5

bf85bbabcc4aa28273d90c62efc1c1c0
SHA1

de27b4d928f5ae48eb5f511bea8c72a8b04a6195
SHA256

afffec3aa15bc3d0157c552d5036d41807817465ce8f4e1b2a3467302141d048
SHA512

70668d53fe8908a1ccb71510341824196484f3de424763ea7c43596a2642d81e3a6401ac50ef8cc5069bdd0089e9059170173415630fcc5bd1cf29e19809ed7d
SSDEEP

6144:UgIzY5c3CzTEVHxenLFAcDxm1WgKVsENe:UxY5cyzTEdILFfVmasENe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bf85bbabcc4aa28273d90c62efc1c1c0.exe

Files

NEAS.bf85bbabcc4aa28273d90c62efc1c1c0.exe
.exe windows:4 windows x86

a722444c7a246e89a76bee3fd044e1fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
WriteFile
CreateFileA
Sleep
VirtualFree
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a722444c7a246e89a76bee3fd044e1fb

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 160KB - Virtual size: 163KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 160KB - Virtual size: 163KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB