NEAS[.]403818a38c2bb525dfb06318a2fa84d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.403818a38c2bb525dfb06318a2fa84d0.exe
Size

49KB
MD5

403818a38c2bb525dfb06318a2fa84d0
SHA1

0874ba429fd4024f4b817a1ff8824e00717d156b
SHA256

8a719bcb119e0607baed78e6726422e908faa4b3410ddc9d3172e96bc6b14423
SHA512

028afb49c151566d8570bd3969e2e34af62f54095d5483f60267920ada873b2bbd686f23e0601ab83237343274e84908c358e5e96877192fdc7b0d4b5aa992a7
SSDEEP

768:tinfZDPNPJap1cFUc+Hl43dvY55xnED4VbSWZAW/z:8fjPWaBClqdvY55BED4VeWa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.403818a38c2bb525dfb06318a2fa84d0.exe

Files

NEAS.403818a38c2bb525dfb06318a2fa84d0.exe
.exe windows:6 windows x86

f57e95b11cd7b2b8f1d327353ce150a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

apphelp

SdbDeletePermLayerKeys
SdbEnumMsiTransforms
SdbFindFirstMsiPackage
SdbFindFirstMsiPackage_Str
SdbFindFirstNamedTag
SdbFindFirstTag
SdbFindFirstTagRef
SdbFindNextMsiPackage
SdbFindNextTag

mstask

NetrJobEnum
NetrJobGetInfo
SAGetAccountInformation
SAGetNSAccountInformation
SASetAccountInformation
SASetNSAccountInformation
SetNetScheduleAccountInformation

certcli

CAAccessCheck
CAAccessCheckEx

regapi

RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA

msvcrt

fopen
fread

kernel32

GetSystemDirectoryA
OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA

htui

HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW

iashlpr

AllocateAttributes

sti

StiCreateInstance

polstore

IPSecClosePolicyStore
IPSecCopyFilterData
IPSecCopyFilterSpec
IPSecCopyISAKMPData
IPSecCopyNFAData
IPSecCopyNegPolData
IPSecCopyPolicyData
IPSecCreateFilterData
IPSecCreateISAKMPData
IPSecCreateNFAData
IPSecCreateNegPolData
IPSecCreatePolicyData
IPSecDeleteFilterData
IPSecDeleteISAKMPData
IPSecDeleteNFAData

dbghelp

ImageRvaToSection
ImageRvaToVa

Sections

.text
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsRC
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f57e95b11cd7b2b8f1d327353ce150a4

Headers

File Characteristics

Imports

apphelp

mstask

certcli

regapi

msvcrt

kernel32

htui

iashlpr

sti

polstore

dbghelp

Sections

.text Size: 7KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 12KB

rsRC Size: 25KB - Virtual size: 25KB

.text
Size: 7KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 12KB

rsRC
Size: 25KB - Virtual size: 25KB