NEAS[.]76a0d945f88829e2fb20b11d8bbd2210[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.76a0d945f88829e2fb20b11d8bbd2210.exe
Size

688KB
MD5

76a0d945f88829e2fb20b11d8bbd2210
SHA1

71bbd6cb8cf820bbba69fc8b7fe6d8ae9f5c5eff
SHA256

6fd46011ac8cc0e65a4cc3fa7259cb5781cde787853122d54e9cf3487a3cb517
SHA512

04205a8a3c90cbb63afae6f67b8e4b39d619227a718aa1a80c9cbba76a4a3cdc46b129ce1563256943e65be9f846948285ac2ed8ec678d8e88ce7cf8ca27c8a0
SSDEEP

12288:yIgxODxpvhhTUHhSVsDYxpvhhTUHhSVsDA:y/MrhhAHv8hhAHvA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.76a0d945f88829e2fb20b11d8bbd2210.exe

Files

NEAS.76a0d945f88829e2fb20b11d8bbd2210.exe
.exe windows:4 windows x86

fc943054e74ab8b3763cb260d55777dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
MoveFileExA
GetCurrentDirectoryA
LoadLibraryA
FindClose
FreeLibrary
IsBadCodePtr
IsBadReadPtr
FindNextFileA
GetProcAddress
FindFirstFileA
SetUnhandledExceptionFilter
ReadFile
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualProtect
GetSystemInfo
FlushFileBuffers
GetLocaleInfoW
CloseHandle
InterlockedDecrement
InterlockedIncrement
CreateFileA
RaiseException
SetEndOfFile

user32

MessageBoxA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

SHGetFolderPathA

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 584KB - Virtual size: 582KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc943054e74ab8b3763cb260d55777dd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 584KB - Virtual size: 582KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 584KB - Virtual size: 582KB