NEAS[.]fd8c1fa9bcdeff99c765d270e1a71d80[.]exe

General

Target

NEAS.fd8c1fa9bcdeff99c765d270e1a71d80.exe
Size

305KB
MD5

fd8c1fa9bcdeff99c765d270e1a71d80
SHA1

777aeea9940a187f7a82e149f7013ef330a74c3f
SHA256

86b11d39898eae36678c172003d5b2df966e917061d0acf6af7a41506f51d1fa
SHA512

4949128f59528b21e3cd6041bd0d687bedce0ecb9d8c9a4ac21533b9f4bc72d0ca8e65d1e1176122c203628d2157f3b2143a65129694c905e083c79b8c424138
SSDEEP

384:cv3A5NnpaujUPPIgro5hY26HD8PmWgeUQ+PKloUO5Ep/z5dGh9QPh5jGUN0/6zCv:dwnobY2ONIzlvd2QPjjGUN0/HXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fd8c1fa9bcdeff99c765d270e1a71d80.exe

Files

NEAS.fd8c1fa9bcdeff99c765d270e1a71d80.exe
.exe windows:4 windows x86

1e4c6e452b75d7ba99496d508dcbd119

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
_vsnprintf
abort
calloc
exit
fclose
fopen
fprintf
fread
free
fsetpos
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e4c6e452b75d7ba99496d508dcbd119

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 292KB - Virtual size: 291KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 1000B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 292KB - Virtual size: 291KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 1000B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B