NEAS[.]47f528dcb1235b398625207094a24a40[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.47f528dcb1235b398625207094a24a40.exe
Size

84KB
MD5

47f528dcb1235b398625207094a24a40
SHA1

e83c36deec8d9c53318339e93e8055873459bc41
SHA256

a2b4ab609a1ef8100bf9a1e43393783c617ec1a37bd623658ad56ec5f9201d09
SHA512

03dc378cf9386b08364862ca17b1cf7ea95323f4a218e6d312a7fc2ba539919ac9476c007e5f2a16cc46a6f654826168c038d33142626b82d625fa26b6a73194
SSDEEP

1536:ONCinbnc11wTgmTPiGHZBEvFYkcIAj8GP6/9W6AY5qowDRB:ONCigmTPfHYfcdobAY5qowr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.47f528dcb1235b398625207094a24a40.exe

Files

NEAS.47f528dcb1235b398625207094a24a40.exe
.exe windows:4 windows x86

575775efcc9e337974071c975f67d207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
CreateDirectoryA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetEndOfFile
GetFullPathNameA
GetTimeZoneInformation
CompareStringA
CompareStringW
Sleep
WinExec
GetDiskFreeSpaceA
CloseHandle
lstrcpyA
SetFilePointer
CreateFileA
WriteFile
MulDiv
lstrcmpiA
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
MoveFileA
DeleteFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetProcAddress
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
ReadFile
MultiByteToWideChar
SetEnvironmentVariableA

user32

SendMessageA
DispatchMessageA
GetMessageA
GetSysColor
TranslateMessage
DrawTextA
GetActiveWindow
GetDC
ReleaseDC
GetDlgItemTextA
EndDialog
UnregisterClassA
GetWindowRect
GetClientRect
ClientToScreen
MoveWindow
LoadIconA
RegisterClassA
PostMessageA
BeginPaint
EndPaint
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadCursorA
SetCursor
DialogBoxParamA
LoadStringA
MessageBoxA
CreateWindowExA
SetDlgItemTextA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoCreateInstance

lz32

LZClose
LZCopy
LZOpenFileA

gdi32

Rectangle
CreateSolidBrush
CreatePen
DeleteObject
Arc
SetTextColor
SetBkColor
Pie
GetDeviceCaps
Polyline
SelectObject
GetTextMetricsA
SetBkMode
EnumFontFamiliesA
GetStockObject
GetSystemPaletteEntries
CreatePalette
GetObjectA
CreateFontIndirectA
EndPage
StartPage
ExtTextOutA
Polygon
SetTextAlign
MoveToEx
TextOutA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

575775efcc9e337974071c975f67d207

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

lz32

gdi32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 33KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 33KB

.rsrc
Size: 4KB - Virtual size: 2KB