78746aa041e51acc643f0a0eb63a0ad0_NEAS

Sharing

Copy URL Twitter E-mail

General

Target

78746aa041e51acc643f0a0eb63a0ad0_NEAS
Size

72KB
MD5

78746aa041e51acc643f0a0eb63a0ad0
SHA1

70114981d43942930f24848cff4b940e34dabb63
SHA256

a134533ef5720708e1f3bb955fcaa68d2bcc72b7d1464f1ace8f48a39f24d216
SHA512

e88ededf0036ad4e66a9d4f97258f28e816fa7f6b14c453c906040d066272ae8d4e5c88a11d0f12ec3ecdc3af9f92f555b140ea373939e80d718713211357a07
SSDEEP

1536:xK1AeHeSwKFv2ALNNcphVc2Vk0pBJFoZpRZ:o1AeHeSwNWzEnVk0p7FoZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78746aa041e51acc643f0a0eb63a0ad0_NEAS

Files

78746aa041e51acc643f0a0eb63a0ad0_NEAS
.exe windows:4 windows x86 arch:x86

73655d38f894d6813616278021be6b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
GetLastError
GetSystemDirectoryA
OutputDebugStringA
GetWindowsDirectoryA
GetModuleFileNameA
CompareStringA
MoveFileA
SetEndOfFile
LoadLibraryA
GetProcAddress
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
DeleteFileA
HeapFree
HeapAlloc
CreateDirectoryA
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
RemoveDirectoryA
SetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
CloseHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
WriteFile
WideCharToMultiByte
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
SetEnvironmentVariableA

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

shlwapi

SHDeleteKeyA

wininet

DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
FindCloseUrlCache

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73655d38f894d6813616278021be6b57

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 3KB