NEAS[.]afe5a2765cd5e9900a9c8669e0cc0810[.]exe

General

Target

NEAS.afe5a2765cd5e9900a9c8669e0cc0810.exe
Size

3.3MB
MD5

afe5a2765cd5e9900a9c8669e0cc0810
SHA1

11f4485a2c0c091eea0d1576e521fdc59d27ac4e
SHA256

bb2f137d3332f5dacf413b6d42eba3ab7f3f88e0fbc2913b7be668f1a73b7a8a
SHA512

821b5eb8734b94b05118a040d794b3c2b5bd727d497ee61787fc4ea3be537be2a025c4936fb5d867d2e928a9d906315de4391a4e1b4e35f9e75d76b9bcdd6cd0
SSDEEP

24576:e5W7tH6C58Xj6PC3dE2r8SR41eIZm3jwncmbDbx8TzMuK1uaop75uQXD0:t0DXyeWL88ujlF5uQT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.afe5a2765cd5e9900a9c8669e0cc0810.exe

Files

NEAS.afe5a2765cd5e9900a9c8669e0cc0810.exe
.exe windows:4 windows x86

0492b59436c424737cb0d8636ad9ea3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetLastError
GetModuleFileNameA
Sleep
CreateThread
LoadLibraryA
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
QueryPerformanceFrequency

user32

DrawTextA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
SetForegroundWindow
InvalidateRgn
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage
UnregisterClassA

gdi32

LineTo
MoveToEx
SetTextColor
CreateFontA
DeleteObject
RestoreDC
SelectObject
SaveDC
CreatePen
GetStockObject

msvcrt

__p___initenv
_XcptFilter
_exit
_fileno
_fstat
_strdup
ctime
_stat
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_adjust_fdiv
exit
fprintf
_iob
strtod
fgets
printf
strncpy
atoi
atof
sscanf
free
calloc
sprintf
malloc
floor
_ftol
_CIpow
fflush
_stricmp
asctime
localtime
time
ceil
strncmp
realloc
memmove
_CIasin
_CIacos
getenv
fseek
fread
fgetc
fwrite
vfprintf
fclose
fopen
_vsnprintf
vsprintf
ftell
_pctype
__mb_cur_max
_isctype
_snprintf
strrchr
_onexit

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0492b59436c424737cb0d8636ad9ea3b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 496KB - Virtual size: 495KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 2.5MB - Virtual size: 2.6MB

.text
Size: 496KB - Virtual size: 495KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 2.5MB - Virtual size: 2.6MB