NEAS[.]0a90157ed240e1ef582ec8e4d6dc0d20[.]exe

General

Target

NEAS.0a90157ed240e1ef582ec8e4d6dc0d20.exe
Size

40KB
MD5

0a90157ed240e1ef582ec8e4d6dc0d20
SHA1

ce703c56edc548fa76b3a4371263e82329389032
SHA256

38be3983c614e18fed7f271c4324f5da429fea0a81ba5ce605979bf50db24749
SHA512

0c0e554d657bb3cf4c0283529d7b0ff112883e3ad9146393a20b39e38b24d6f86f3245eef638d1fe1b76f5ec5fbbafea07796784e8c51a2c779e5008645e3c75
SSDEEP

384:77vwRGyCMPTBHFOow/nf4SxX2ntA5Z7p1MJXOsOeWx8lVe2YPi740:XwPrBl9snglntu1MJXOsxW6lVe2GiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0a90157ed240e1ef582ec8e4d6dc0d20.exe

Files

NEAS.0a90157ed240e1ef582ec8e4d6dc0d20.exe
.exe windows:5 windows x86

ec37f725b2689e4932373eab7c062bfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

dbghelp

DbgHelpCreateUserDump

glu32

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

adsldpc

ADSIGetColumn
ADSIFreeColumn
ADSIModifyRdn
ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

msrating

RatingCustomInit

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

uinC
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec37f725b2689e4932373eab7c062bfb

Headers

File Characteristics

Imports

dbghelp

glu32

kernel32

adsldpc

msrating

mtxclu

samlib

Sections

.text Size: 5KB - Virtual size: 28KB

DATA Size: 7KB - Virtual size: 16KB

rsrc Size: 23KB - Virtual size: 24KB

uinC Size: 512B - Virtual size: 496B

.text
Size: 5KB - Virtual size: 28KB

DATA
Size: 7KB - Virtual size: 16KB

rsrc
Size: 23KB - Virtual size: 24KB

uinC
Size: 512B - Virtual size: 496B