NEAS[.]039cf3fddc62f32620161676c9d3b9f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.039cf3fddc62f32620161676c9d3b9f0.exe
Size

208KB
MD5

039cf3fddc62f32620161676c9d3b9f0
SHA1

cae28373eae6e4f86001d347b39a78a71e061efe
SHA256

11b5014ced2663d7f25d5f7ea7c0b3ccb9b2355c3b23bf952b58c22ccb17abce
SHA512

e778ce89159be8e4cac4a7a3de4a633bbbc97c95345c5542166d8cee3abf9bae49b188709809339f0547911ccaf0583b226d00f8ddfded0127382b844f81cc9d
SSDEEP

6144:KZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5:oquCuygMQjd5vJIBP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.039cf3fddc62f32620161676c9d3b9f0.exe

Files

NEAS.039cf3fddc62f32620161676c9d3b9f0.exe
.exe windows:4 windows x86 arch:x86

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA

user32

GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor

gdi32

CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx

advapi32

RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey

shlwapi

StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW

opengl32

glReadBuffer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PwM
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OwvyT
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MTxF
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XWRUxX
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YCYo
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tKhtUt
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

Sections

.text Size: 12KB - Virtual size: 11KB

.PwM Size: 1KB - Virtual size: 10KB

.OwvyT Size: 3KB - Virtual size: 26KB

.MTxF Size: 1KB - Virtual size: 37KB

.XWRUxX Size: 1KB - Virtual size: 40KB

.data Size: 11KB - Virtual size: 11KB

.YCYo Size: 1KB - Virtual size: 8KB

.tKhtUt Size: 2KB - Virtual size: 221KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.PwM
Size: 1KB - Virtual size: 10KB

.OwvyT
Size: 3KB - Virtual size: 26KB

.MTxF
Size: 1KB - Virtual size: 37KB

.XWRUxX
Size: 1KB - Virtual size: 40KB

.data
Size: 11KB - Virtual size: 11KB

.YCYo
Size: 1KB - Virtual size: 8KB

.tKhtUt
Size: 2KB - Virtual size: 221KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB