NEAS[.]6b5509aad02dc96fae9837a161ee43d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6b5509aad02dc96fae9837a161ee43d0.exe
Size

50KB
MD5

6b5509aad02dc96fae9837a161ee43d0
SHA1

d923b386e7c6d385628547a5092b6b04fe884130
SHA256

15dd5662a49f80ded255d031de88f120b83a50b4947568e4373c05e507074a9d
SHA512

a20f5a09b73bab90f8288e5c274a9c5a0e9b241e9e06cd266e6cb7e0ec38a66f9e6fc8a113df4bbf0da4607ba3ae9568f0c1599c54a68deb0f23077234e39fdf
SSDEEP

384:iB4BH65NveqFVPI80Dzbfkv8Ze5rJc0mbUEFYIysxz33dKUu2EGmF8poki8G:i6BH65iHfkP5r5hchMUu2EGm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6b5509aad02dc96fae9837a161ee43d0.exe

Files

NEAS.6b5509aad02dc96fae9837a161ee43d0.exe
.exe windows:4 windows x86 arch:x86

9795b24ac99dedb33329b70c87416668

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
printf
puts
scanf
signal
vfprintf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/35
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/51
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/77
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/89
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/113
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9795b24ac99dedb33329b70c87416668

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 16B

.rdata Size: 512B - Virtual size: 376B

.bss Size: - Virtual size: 96B

.idata Size: 1024B - Virtual size: 908B

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/4 Size: 512B - Virtual size: 224B

/19 Size: 1024B - Virtual size: 904B

/35 Size: 1KB - Virtual size: 1KB

/51 Size: 13KB - Virtual size: 12KB

/63 Size: 2KB - Virtual size: 2KB

/77 Size: 2KB - Virtual size: 1KB

/89 Size: 1024B - Virtual size: 964B

/102 Size: 512B - Virtual size: 271B

/113 Size: 3KB - Virtual size: 2KB

/124 Size: 512B - Virtual size: 72B

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 376B

.bss
Size: - Virtual size: 96B

.idata
Size: 1024B - Virtual size: 908B

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/4
Size: 512B - Virtual size: 224B

/19
Size: 1024B - Virtual size: 904B

/35
Size: 1KB - Virtual size: 1KB

/51
Size: 13KB - Virtual size: 12KB

/63
Size: 2KB - Virtual size: 2KB

/77
Size: 2KB - Virtual size: 1KB

/89
Size: 1024B - Virtual size: 964B

/102
Size: 512B - Virtual size: 271B

/113
Size: 3KB - Virtual size: 2KB

/124
Size: 512B - Virtual size: 72B