6ae2b57e6516f422cabdfb560d0f2ab0_NEAS

Sharing

Copy URL Twitter E-mail

General

Target

6ae2b57e6516f422cabdfb560d0f2ab0_NEAS
Size

6.4MB
MD5

6ae2b57e6516f422cabdfb560d0f2ab0
SHA1

f7a234150f39f64337be29c738e5709e825532b1
SHA256

1d3386a17a08754630441341ec24cc992d8fb138a32a99e922bdf5f0b41da134
SHA512

f7e96e444c70a93428561734ab44fd9580a06c13f2084abeb3ceeea50450dde682bd041b3622fc542776c9a6cc98b039fa7d87ed9bb154fc9683cd8126020d7c
SSDEEP

98304:btlJbe7IemoN12TKove545RxdI9OYiArWeZEdbregu032HE/7cfl5z8BZCVxOHsl:BeDmoN1SFz7fI9EVRGyol2v3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ae2b57e6516f422cabdfb560d0f2ab0_NEAS

Files

6ae2b57e6516f422cabdfb560d0f2ab0_NEAS
.exe windows:6 windows x86 arch:x86

16843c1acf4c830a4d3900026f20486c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
LCMapStringW
CloseHandle
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
Sleep
QueryDosDeviceW
GetTempPathW
SystemTimeToFileTime
GetExitCodeProcess
RemoveDirectoryW
EnumResourceNamesW
lstrcpyW
ResumeThread
GetDiskFreeSpaceW
SetThreadLocale
IsDebuggerPresent
HeapCreate
SwitchToThread
EnumResourceTypesW
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetLastError
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
SetLastError
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW

user32

ToAsciiEx
SetWindowLongA
GetClassNameW
GetMessageTime
DestroyWindow
GetMessageA
GetWindowPlacement
GetSysColor
CheckDlgButton
AppendMenuA
RegisterWindowMessageW
PostMessageW
AttachThreadInput
SetScrollPos
GetDlgItem
CharUpperW
SetWindowLongW
DefWindowProcA
RedrawWindow
PostMessageA
SetWindowRgn
SetCursor
GetDlgItemInt
KillTimer
GetDC
ReleaseDC
GetDesktopWindow
CheckRadioButton

gdi32

SelectClipRgn
GetCharABCWidthsFloatA
GetPixel
DeleteDC
SaveDC
SelectPalette
MaskBlt
CreateRectRgn
GetCharWidth32A
TextOutA
CreateBitmap
UpdateColors
MoveToEx

advapi32

RegEnumKeyExW
AllocateAndInitializeSid

shell32

ShellExecuteExW
CommandLineToArgvW

oleaut32

VariantCopy
SafeArrayGetLBound
VariantClear

Sections

.text
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.9MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qrQE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16843c1acf4c830a4d3900026f20486c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Sections

.text Size: 456KB - Virtual size: 456KB

.data Size: 5.9MB - Virtual size: 6.0MB

.idata Size: 3KB - Virtual size: 3KB

.qrQE Size: 6KB - Virtual size: 6KB

.reloc Size: 7KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 456KB - Virtual size: 456KB

.data
Size: 5.9MB - Virtual size: 6.0MB

.idata
Size: 3KB - Virtual size: 3KB

.qrQE
Size: 6KB - Virtual size: 6KB

.reloc
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 2KB