NEAS[.]2ba5b414b66e464bbc33ad3a702e0e20[.]exe

General

Target

NEAS.2ba5b414b66e464bbc33ad3a702e0e20.exe
Size

20KB
MD5

2ba5b414b66e464bbc33ad3a702e0e20
SHA1

7fbf183ca8fd8348b4ef5fd906386914ffd7eb04
SHA256

385d9baaedb2e39a2501a8cce0bfe5f51a22c284810c1a2d61ff10dcbe90e568
SHA512

115efd6609ac1dd211b9e9a47a2eaa7a232ed81aee9053fb3fb0b7d33cb1ee26a8a5ecec8353b7c99b76e7661b907fdcdb783cb151e93146510617ef59b4b250
SSDEEP

192:FCmThJhWVN9qdtXGzAUkSEZfnP4oyn1r+ZO:FCfnY/XGV64rD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2ba5b414b66e464bbc33ad3a702e0e20.exe

Files

NEAS.2ba5b414b66e464bbc33ad3a702e0e20.exe
.exe windows:4 windows x86

8901c5770aeb24d193c523c3f4dac987

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCurrentProcess
GetProcAddress

shfolder

SHGetFolderPathA

ole32

CoTaskMemFree

msvcp60

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

msvcrt

__p___initenv
_except_handler3
__set_app_type
__CxxFrameHandler
getenv
__dllonexit
_onexit
_exit
_XcptFilter
exit
_controlfp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8901c5770aeb24d193c523c3f4dac987

Headers

File Characteristics

Imports

kernel32

shfolder

ole32

msvcp60

msvcrt

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 684B

.reloc Size: 4KB - Virtual size: 446B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 684B

.reloc
Size: 4KB - Virtual size: 446B