NEAS[.]d9c7835cacc97138830bd228ae132650[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9c7835cacc97138830bd228ae132650.exe
Size

106KB
MD5

d9c7835cacc97138830bd228ae132650
SHA1

0c8e6dfdf2d3f87302e7d1d3fac4f0b8e35e5421
SHA256

02c917da842bceb36abeacefdcc8132f101636beb5acad300200f53dc3ce5329
SHA512

31ea36fa4571a4052a0f8086c3f5c0b3d8d13982115993f00fd494fec110700c6cff9f0630ec1da9c9dbfe22744f7d2cad30ac3bb57bb40d880afc39a255b24f
SSDEEP

1536:xmauR4YheyZNdjFsz9XuruIm6slQUShZm9USmaySDNstRLuoj:xmauR4HJJIm6+QNeU9ay5Coj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9c7835cacc97138830bd228ae132650.exe

Files

NEAS.d9c7835cacc97138830bd228ae132650.exe
.exe windows:4 windows x86

bcb79eadd5061a98b26a9b2369e14447

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject

ole32

CoCreateInstance
CoInitialize
CoUninitialize

msvcrt

_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
atoi
fflush
fprintf
fwrite
setvbuf
signal
sprintf
strcmp
strlen
strncmp
strrchr
vfprintf

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 264B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 96B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/47
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/86
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/97
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/108
Size: 1024B - Virtual size: 944B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcb79eadd5061a98b26a9b2369e14447

Headers

File Characteristics

Imports

kernel32

ole32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 52B

.rdata Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 264B

.idata Size: 1KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 96B

/19 Size: 8KB - Virtual size: 7KB

/35 Size: 40KB - Virtual size: 40KB

/47 Size: 2KB - Virtual size: 2KB

/61 Size: 2KB - Virtual size: 2KB

/73 Size: 1KB - Virtual size: 1KB

/86 Size: 1KB - Virtual size: 1KB

/97 Size: 4KB - Virtual size: 4KB

/108 Size: 1024B - Virtual size: 944B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 52B

.rdata
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 264B

.idata
Size: 1KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 96B

/19
Size: 8KB - Virtual size: 7KB

/35
Size: 40KB - Virtual size: 40KB

/47
Size: 2KB - Virtual size: 2KB

/61
Size: 2KB - Virtual size: 2KB

/73
Size: 1KB - Virtual size: 1KB

/86
Size: 1KB - Virtual size: 1KB

/97
Size: 4KB - Virtual size: 4KB

/108
Size: 1024B - Virtual size: 944B