NEAS[.]1adf23fb144659d176ff14bab6415b50[.]exe

General

Target

NEAS.1adf23fb144659d176ff14bab6415b50.exe
Size

60KB
MD5

1adf23fb144659d176ff14bab6415b50
SHA1

c20b7e445f65a529a7364419e36ebbb3fe0acea0
SHA256

547c6cc35d1e760c87afd45dcc755a5f9907e0a1d4c36564d682124b17cee383
SHA512

f73526c755be5011bdb28d5cac75e9bb3d32d3f991f2d77abb0e229fffa3fef37efbb649f8c913c1ce4095a79bb09f0e9cd9ae0e2060d94e96497bebd75f2a44
SSDEEP

768:KHgRYXTrgS3r5DhN1HSt3aWmGM+LM/b3okZqk54de25mO3t6UOYuOoTXB3Z:tRYdNDtHStK3ToCFoe25vrhoTBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1adf23fb144659d176ff14bab6415b50.exe

Files

NEAS.1adf23fb144659d176ff14bab6415b50.exe
.exe windows:4 windows x86

9157ddcae853e4091dadd23af4ab7045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

kernel32

VirtualAlloc
SetHandleCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetShortPathNameW
WideCharToMultiByte
FindClose
FindFirstFileA
FindNextFileA
GetLastError
CreateDirectoryA
GetModuleFileNameA
UnmapViewOfFile
CloseHandle
MapViewOfFile
GetSystemInfo
CreateFileMappingA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DuplicateHandle
GetCurrentProcess
MoveFileA
DeleteFileA
HeapReAlloc
SetStdHandle
GetFileType
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
MultiByteToWideChar
TerminateProcess
GetCPInfo
GetStdHandle
GetStartupInfoA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
WriteFile
FlushFileBuffers
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
ReadFile
CreateFileA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
SetEndOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
CreateProcessA
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9157ddcae853e4091dadd23af4ab7045

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 10KB