NEAS[.]1113f9312b17c0bff13a354635e87f70[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.1113f9312b17c0bff13a354635e87f70.exe
Size

2.8MB
MD5

1113f9312b17c0bff13a354635e87f70
SHA1

f77d8ffe1242ba041343f56e1ad04fb50ac21471
SHA256

24bb3367200d0e56121f4ae81941217a4b701d1bac13772bd2a22c5a9681602b
SHA512

5932bea56e66489f688ee96cf6a213b092798c652d7ca736c124288ad8c0a3b1fab7eafac5eb4e5e5efc7a4412d774f8b16811f04cc6a12de63e915b6713cf9e
SSDEEP

49152:w++k9PPhbYplbANTwr5zCeEGXml2I5CtrHmGTPeOG9XSOUBUOmvuoys6F9H4rN0i:w+vPOAKlo8r3DeO1OIUOs6s6YrRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1113f9312b17c0bff13a354635e87f70.exe

Files

NEAS.1113f9312b17c0bff13a354635e87f70.exe
.exe windows:4 windows x86

47017e489af47cf9bffb8bb00332ed66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
VirtualAlloc
GetSystemInfo
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
RaiseException
HeapFree
HeapAlloc
GetProcessHeap
GetLastError
CloseHandle
CreateFileA
ReadFile
SetFilePointer
GetFileSize
UnmapViewOfFile
MapViewOfFile
GetProcAddress
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetTickCount
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
FlushFileBuffers
QueryPerformanceCounter
IsBadWritePtr
HeapCreate
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
HeapSize
HeapDestroy
VirtualProtect
CreateFileMappingA
VirtualFree

user32

CreateWindowExA
LoadCursorA
RegisterClassExA
IsWindow
SetTimer
KillTimer
SetWindowTextA
CopyRect
GetClientRect
LoadIconA
RegisterClassA
UnregisterClassA
DefWindowProcA
GetClassNameA
GetWindowLongA
SetWindowLongA
UpdateWindow
PostQuitMessage
ShowWindow
PostMessageA
GetWindowRect
MoveWindow
BeginPaint
EndPaint
LockWindowUpdate
RedrawWindow
SetForegroundWindow
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
ReleaseDC
GetDC
SetFocus
GetFocus
SetCapture
ReleaseCapture
EqualRect

gdi32

GetDeviceCaps
GetStockObject

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoGetMalloc

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
SysAllocString

urlmon

CreateURLMoniker

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 852KB - Virtual size: 851KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47017e489af47cf9bffb8bb00332ed66

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

urlmon

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 852KB - Virtual size: 851KB

.data Size: 4KB - Virtual size: 9KB

Shared Size: 4KB - Virtual size: 4B

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 852KB - Virtual size: 851KB

.data
Size: 4KB - Virtual size: 9KB

Shared
Size: 4KB - Virtual size: 4B

.rsrc
Size: 40KB - Virtual size: 39KB