NEAS[.]a2271473e0a35c4c152e5b2543edd540[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.a2271473e0a35c4c152e5b2543edd540.exe
Size

49KB
MD5

a2271473e0a35c4c152e5b2543edd540
SHA1

091a7cc9799f4b382a801521bcd94557687cfbc7
SHA256

9a6a2bc54ee6059efac5e6a9fc256d6b4f0021ac4dc97e85eda1f5c13b9ee4f0
SHA512

1c8c62eb20ae9e0b03ed382d300fc15e15b7c8369ac283aec9b328e7d93ba82cdc1873eb83ed9bcc875f76e01782d86d93169e0892ce304ccce05a1f1b5735d1
SSDEEP

768:3vKPjUJap1c1LpH8l43dvY55xnED4VbSWi/BRRK:3iUWa1N8lqdvY55BED4VeWiZXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a2271473e0a35c4c152e5b2543edd540.exe

Files

NEAS.a2271473e0a35c4c152e5b2543edd540.exe
.exe windows:6 windows x86

f57e95b11cd7b2b8f1d327353ce150a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

apphelp

SdbDeletePermLayerKeys
SdbEnumMsiTransforms
SdbFindFirstMsiPackage
SdbFindFirstMsiPackage_Str
SdbFindFirstNamedTag
SdbFindFirstTag
SdbFindFirstTagRef
SdbFindNextMsiPackage
SdbFindNextTag

mstask

NetrJobEnum
NetrJobGetInfo
SAGetAccountInformation
SAGetNSAccountInformation
SASetAccountInformation
SASetNSAccountInformation
SetNetScheduleAccountInformation

certcli

CAAccessCheck
CAAccessCheckEx

regapi

RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA

msvcrt

fopen
fread

kernel32

GetSystemDirectoryA
OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA

htui

HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW

iashlpr

AllocateAttributes

sti

StiCreateInstance

polstore

IPSecClosePolicyStore
IPSecCopyFilterData
IPSecCopyFilterSpec
IPSecCopyISAKMPData
IPSecCopyNFAData
IPSecCopyNegPolData
IPSecCopyPolicyData
IPSecCreateFilterData
IPSecCreateISAKMPData
IPSecCreateNFAData
IPSecCreateNegPolData
IPSecCreatePolicyData
IPSecDeleteFilterData
IPSecDeleteISAKMPData
IPSecDeleteNFAData

dbghelp

ImageRvaToSection
ImageRvaToVa

Sections

.text
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsRC
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f57e95b11cd7b2b8f1d327353ce150a4

Headers

File Characteristics

Imports

apphelp

mstask

certcli

regapi

msvcrt

kernel32

htui

iashlpr

sti

polstore

dbghelp

Sections

.text Size: 7KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 12KB

rsRC Size: 25KB - Virtual size: 25KB

.text
Size: 7KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 12KB

rsRC
Size: 25KB - Virtual size: 25KB