NEAS[.]71b7ce388b8a363a5a112bb7117d1200[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.71b7ce388b8a363a5a112bb7117d1200.exe
Size

84KB
MD5

71b7ce388b8a363a5a112bb7117d1200
SHA1

c695dfa97e4255973f0847956ec25092213c1b32
SHA256

376b5f92a3962ae8f0c00a26046fef954b8e96edd92a55e4b2e1c166106f6bff
SHA512

796526056090d54c20c6bf78aeb9d674a6893623885f30849d393bed5f29b9e40a985cda92f71a1bc178dfb3c2633d1ee4ff1f7cab1a8e51456fe762bb0cc162
SSDEEP

1536:zOYL1yyHT7KeJRmRVVx4ct7U5pka1RxYZ9UNoOMWl:zO21T7ZJRmRVVycd5xe3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.71b7ce388b8a363a5a112bb7117d1200.exe

Files

NEAS.71b7ce388b8a363a5a112bb7117d1200.exe
.dll windows:4 windows x86

83fc1b2549ea9a642c982751400f172b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

panio

PanMakeTmpName
PanWriteFile
PanOpenFile
PanReadFile
PanSeekFile
PanStrnicmp
PanCloseFile
PanStrlen
PanStrcpy
PanWritePrivateProfileInt
PANGetLibDir
PAN_GetModuleDirFile
direct_f
PanGetPrivateProfileInt
PanGetPrivateProfileString

drv_dc

ord2
ord1
ord5

drv_dct

ord7
ord5
ord1

msvcr71

_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_initterm
memmove
malloc
_assert
free
_adjust_fdiv

kernel32

MulDiv
GlobalSize
GlobalReAlloc
lstrcmpiA
OpenFile
IsBadStringPtrA
GetSystemDefaultLangID
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalAlloc
LocalLock
lstrcpyA
lstrlenA
LocalFree
lstrcmpA
GetProfileStringA
GetProfileIntA
GetVersion
lstrcatA
LocalUnlock

user32

CreateDialogParamA
GetSysColor
UnregisterClassA
LoadStringA
RegisterClassA
LoadCursorA
LoadIconA
GetWindowLongA
DestroyWindow
SetMenu
IsWindow
CreateWindowExA
SendMessageA
DestroyMenu
LoadAcceleratorsA
LoadMenuA
DefWindowProcA
EqualRect
GetClientRect
UpdateWindow
InvalidateRect
ReleaseDC
GetDC
WinHelpA
SetWindowLongA
RegisterWindowMessageA
PostMessageA
BeginPaint
SetFocus
SetWindowPos
MessageBoxA
wsprintfA
SetWindowTextA
MoveWindow
GetWindow
GetSystemMetrics
GetMenuStringA
GetMenu
GetParent
ShowWindow
SetRect
GetDialogBaseUnits
EndDialog
SetDlgItemTextA
IsDlgButtonChecked
GetDlgItem
GetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
EnableWindow
SetCursor
SetDlgItemInt
DialogBoxParamA
GetFocus
IsWindowEnabled
CharNextA
CharUpperA
DispatchMessageA
TranslateMessage
IsDialogMessageA
PeekMessageA
CharToOemA
OemToCharA
GetDlgItemInt
ScreenToClient
DestroyCursor
ReleaseCapture
PtInRect
SetCapture
ClientToScreen
GetCursor
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemCount
DrawMenuBar
ModifyMenuA
FillRect
EndPaint
GetWindowRect

gdi32

DeleteObject
SelectPalette
RealizePalette
GetObjectA
GetStockObject
GetDeviceCaps
Escape
SetAbortProc
StartDocA
AbortDoc
StartPage
EndPage
EndDoc
DeleteDC
CreateSolidBrush
UnrealizeObject
CreatePen
MoveToEx
LineTo
CreatePalette

comdlg32

GetSaveFileNameA
FindTextA
ReplaceTextA
PrintDlgA
GetOpenFileNameA

Exports

Exports

CreateNoteEditorWindow
Dlg_About
Dlg_FieldChange
Dlg_FieldInsert
Dlg_Frame
Dlg_Options
Dlg_PageSetup
Image_ChangeHook
Image_FormatDlg
Image_ImportHook
Main_WndProc
Prev_ToolProc
Prev_ViewProc
Print_AbortDlg
Print_AbortProc

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83fc1b2549ea9a642c982751400f172b

Headers

File Characteristics

Imports

panio

drv_dc

drv_dct

msvcr71

kernel32

user32

gdi32

comdlg32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 4KB - Virtual size: 3KB