NEAS[.]2d6679e9c4b0d2835a2159625e8f5c70[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.2d6679e9c4b0d2835a2159625e8f5c70.exe
Size

51KB
MD5

2d6679e9c4b0d2835a2159625e8f5c70
SHA1

4b0f5a76c85009ce26221b12cd05e9524ba7aa98
SHA256

62dca3a68d9594b619bc13febaf14217523ab6e54a3c535d00c43976bbf4a0cb
SHA512

62533301e8df9282692636a62c91840b8c25070e02ec85c570355f4ba16cfb9ea7cb921b341deee9ffa5a2f9abd0fe0d140fbd612819a542b2e837473c4885f6
SSDEEP

768:BPrvOTlbaFRI/FrJnTluJHXWGRjmgUVVMn9pW+:ZTO1aFulDuFXW3c9Y+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d6679e9c4b0d2835a2159625e8f5c70.exe

Files

NEAS.2d6679e9c4b0d2835a2159625e8f5c70.exe
.exe windows:5 windows x86

76664ca07cf1e1fae14b9820f225504c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenServiceA
OpenSCManagerA
QueryServiceStatus

kernel32

ReadFile
WriteFile
GetTimeFormatW
GetDateFormatW
GetSystemDefaultLCID
Sleep
SetFilePointer
CreateFileA
CreateEventA
MoveFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
CloseHandle
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CreateThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
CreateDirectoryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
CreateProcessA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
WaitForSingleObject
GetOverlappedResult
ResetEvent
WideCharToMultiByte

gdi32

GetStockObject
GetTextMetricsA
TextOutA

user32

SendMessageA
InvalidateRect
LoadStringA
wsprintfA
ReleaseDC
GetDC
GetClientRect
EndDialog
PostQuitMessage
EndPaint
ValidateRect
BeginPaint
SetWindowTextA
EnableMenuItem
GetMenu
DestroyWindow
MessageBoxA
DialogBoxParamA
DefWindowProcA
RegisterClassA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA

comdlg32

GetSaveFileNameA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��;8
Size: 951.9MB - Virtual size: 951.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

Sharing

General

Malware Config

Signatures

Files

76664ca07cf1e1fae14b9820f225504c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 10KB - Virtual size: 279KB

.rsrc Size: 4KB - Virtual size: 4KB

���;8 Size: 951.9MB - Virtual size: 951.9MB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 10KB - Virtual size: 279KB

.rsrc
Size: 4KB - Virtual size: 4KB

��;8
Size: 951.9MB - Virtual size: 951.9MB