NEAS[.]6c9d84a5cda1f5107ea539f9180e0570[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6c9d84a5cda1f5107ea539f9180e0570.exe
Size

41KB
MD5

6c9d84a5cda1f5107ea539f9180e0570
SHA1

9c811309388627feb1fecd0964cd9fccae45e98a
SHA256

177a0038e92a9a89cc23773491b107545d34b55df59c82f1f4cdec5ab791e880
SHA512

cde4f57ffbfe8054727fb66059c7e5d50d7d14e74f987387546fe8f7db0f179062315467a9d696da9b300fd561edab14e32b0ea65c0748681f3a2c3524083e8e
SSDEEP

768:S25KnNN2Om25/Y2aKGmCVeTo3j3iVCWZCoKTSugi:VeNN2Om25LaeMzSVCflg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6c9d84a5cda1f5107ea539f9180e0570.exe

Files

NEAS.6c9d84a5cda1f5107ea539f9180e0570.exe
.exe windows:4 windows x86

0ebc69490c0d779e2c08b5c4f5809805

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
lstrlenA
GlobalFree
ExitProcess
LoadLibraryA
GetProcAddress
GlobalAlloc
lstrcpynA
GetModuleHandleA
MultiByteToWideChar
FreeEnvironmentStringsW
CloseHandle
SetEnvironmentVariableA
HeapReAlloc
CompareStringA
FlushFileBuffers
CompareStringW
VirtualAlloc
GetStringTypeW
SetStdHandle
HeapFree
HeapAlloc
GetStringTypeA
GetLastError
WriteFile
SetFilePointer
VirtualFree
GetTimeZoneInformation
GetSystemTime
FreeLibrary
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
HeapCreate
RtlUnwind
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy

user32

GetMessageA
DispatchMessageA
TranslateMessage
FindWindowA
CreateWindowExA
RegisterClassExA
SetTimer
LoadCursorA
LoadIconA
LoadStringA
GetClassNameA
KillTimer
MessageBoxA
RegisterWindowMessageA
GetQueueStatus
PostQuitMessage
DefWindowProcA

gdi32

GetStockObject

advapi32

RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ebc69490c0d779e2c08b5c4f5809805

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 11KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 432B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 11KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 432B