NEAS[.]3841de85d604668e3809f6c92979fee0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3841de85d604668e3809f6c92979fee0.exe
Size

136KB
MD5

3841de85d604668e3809f6c92979fee0
SHA1

05391073b6661e73f89277cfdb7d0a63a07a04fe
SHA256

e3a9ef96fdd10f6e8190b32dc272d96a15045e3e999f90b8250391cb0a4793a2
SHA512

0965f68d0adbeee8a20aaea268e5bdef1e661a48d99ad1f161eecafe63e9abae371b8440c6b8aadfbefcb1fec7d01b2d80597b834cd34dcc17204a46629ee9b6
SSDEEP

3072:REnnHM/lIBvuU4z8b9IC4Wu8JU4OOBZ6YeGCH:NuUzG934J4NBZh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3841de85d604668e3809f6c92979fee0.exe

Files

NEAS.3841de85d604668e3809f6c92979fee0.exe
.exe windows:6 windows

badf0478edebd5b0e8d72eb6189ca6d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW

advapi32

RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource

kernel32

IsProcessorFeaturePresent
FlsFree
GetModuleHandleW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
LoadLibraryA
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
GetStringTypeW
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
InitializeCriticalSectionEx
LCMapStringEx
DecodePointer
EncodePointer

user32

MessageBoxW

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsprintf_s
_set_fmode
setvbuf
__stdio_common_vswprintf
fputwc
__stdio_common_vfwprintf
fflush
_wfsopen
__stdio_common_vsnwprintf_s
fputws
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

_callnewh
free
calloc
_set_new_mode
malloc

api-ms-win-crt-string-l1-1-0

strcpy_s
strcspn
toupper
wcsnlen
strlen
strcmp
_wcsdup
wcsncmp

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul

api-ms-win-crt-runtime-l1-1-0

exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
__p___argc
_cexit
__p___wargv
_c_exit
_exit
_errno
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
terminate
_configure_wide_argv
_initterm_e
abort
_initterm
_get_initial_wide_environment
_initialize_wide_environment

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
_unlock_locales
localeconv
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
setlocale
_lock_locales

api-ms-win-crt-math-l1-1-0

__setusermatherr
frexp

api-ms-win-crt-time-l1-1-0

wcsftime
_time64
_gmtime64_s

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��A�u
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

badf0478edebd5b0e8d72eb6189ca6d5

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

kernel32

user32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 4KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

���A�u Size: 16KB - Virtual size: 20KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB

��A�u
Size: 16KB - Virtual size: 20KB