NEAS[.]ce722cb571a852def126039b13349b20[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ce722cb571a852def126039b13349b20.exe
Size

2.0MB
MD5

ce722cb571a852def126039b13349b20
SHA1

11ff6d34429cef49fb4c6cb67a1db593dfe48a78
SHA256

5abb1d4ae9fefa84e9dbbac274e025f5a78e855036de4e5bf296a68fad00cb04
SHA512

87c014188a32b7e98e0026bed798b032f3a88096146f9f7d01c99cf450c02956d30b25bf332b7e7cb99b00939f1f551af53543cb51635fbd2e06e0e0c296cff4
SSDEEP

49152:p7Ijb/JTeNit1HF+h/lHhAKeB78ewiq66o+AtHMPciDW:p0H/H1HF+VjAKeBvHqPA6PcP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ce722cb571a852def126039b13349b20.exe

Files

NEAS.ce722cb571a852def126039b13349b20.exe
.exe windows:4 windows x86

229acd9a3985f3cecb0ef87434030483

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
WriteFile
MulDiv
SetFileAttributesA
SetFileTime
ReadFile
CreateDirectoryA
DeleteFileA
GetTempFileNameA
GetFileSize
GetModuleFileNameA
FlushFileBuffers
GetLocaleInfoA
SetFilePointer
SetEndOfFile
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetTempPathA
CreateFileA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetDC
SetCursor
ReleaseDC
MessageBoxA
InvalidateRect
LoadCursorA
LoadBitmapA

gdi32

SelectObject
GetDeviceCaps
BitBlt
DeleteObject
DeleteDC
StretchBlt
CreateCompatibleDC

shell32

ShellExecuteA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

229acd9a3985f3cecb0ef87434030483

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 16KB - Virtual size: 12KB