NEAS[.]7f823184a29f39de0e407deb0dc2a2d0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.7f823184a29f39de0e407deb0dc2a2d0.exe
Size

98KB
MD5

7f823184a29f39de0e407deb0dc2a2d0
SHA1

787cebb244725a628901960c28302a99e0270d8f
SHA256

21bc4909e7f1eb4985fc90c994d094b58e51bf058843ef8288931303bee1b9dc
SHA512

2496bbf1580851f239e9a7ed930066fbc71c9b4af27bf3e176329f21cffcd6bd0d26707db9aab985b29854c39a746b306ad91f3f40e3936d64b9a6dba7acb301
SSDEEP

1536:lsKZbKJC4AC9hKwx2PV5HE7itqVmFPmWjJ3kv1RCj7CMLFCALkvOrmw4m2OE:ecB4AC3QV5HE7APlsRCdhC9GrOzF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7f823184a29f39de0e407deb0dc2a2d0.exe

Files

NEAS.7f823184a29f39de0e407deb0dc2a2d0.exe
.exe windows:4 windows x86

1132dbd421d5e0d3a9b4a125f2df376a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
MoveFileExA
LocalReAlloc
lstrcmpA
GetEnvironmentStrings
SizeofResource
LoadLibraryA
FreeLibrary
InitializeCriticalSection
GlobalAddAtomA
RaiseException
GetCurrentProcess
SetLastError
GetLocaleInfoA
GetFileSize
lstrcpyA
GetCommandLineA
GetThreadLocale
GetDiskFreeSpaceA
DeleteCriticalSection
CreateEventA
DeleteFileA
FindResourceA
GetTickCount
GetFileType
CloseHandle
GetVersionExA
EnterCriticalSection
FindClose
SetEndOfFile
LocalFree
FormatMessageA
CreateFileA
HeapAlloc
CompareStringA
WriteFile
GetStdHandle
SetErrorMode
LoadLibraryExA
lstrlenA
EnumCalendarInfoA
lstrcmpiA
GetStringTypeA
GetLastError
GetUserDefaultLCID
GlobalAlloc
GetSystemDefaultLangID
HeapDestroy
GetCurrentThread
LockResource
FreeResource
lstrcatA
GetModuleHandleA
GlobalDeleteAtom
GetProcessHeap
Sleep
ExitThread
GetModuleFileNameA
GetStartupInfoA
GlobalFindAtomA
GetLocalTime
MulDiv
LoadResource
GetCurrentProcessId
WideCharToMultiByte
GetOEMCP
SetThreadLocale
HeapFree
GetACP
SetEvent
VirtualAllocEx
GetCPInfo
GetFullPathNameA
ExitProcess
CreateThread
lstrcpynA
WaitForSingleObject
GetDateFormatA
VirtualQuery
ResetEvent
VirtualAlloc
GetStringTypeW
LocalAlloc
FindFirstFileA
VirtualFree
GetVersion

user32

GetKeyboardLayoutNameA
CharLowerA
DefWindowProcA
GetClientRect
GetMenuStringA
GetKeyState
KillTimer
CallWindowProcA
SetTimer
WindowFromPoint
ChildWindowFromPoint
ShowOwnedPopups
FillRect
EnableScrollBar
OpenClipboard
GetClassNameA
GetDCEx
ShowWindow
DestroyMenu
GetDC
GetDesktopWindow
RegisterWindowMessageA
CharNextW
MsgWaitForMultipleObjects
RegisterClassA
CreateIcon
EmptyClipboard
InsertMenuItemA
LoadKeyboardLayoutA
CloseClipboard
LoadCursorA
IsWindowEnabled
DefFrameProcA
EnableMenuItem
SetActiveWindow
DrawEdge
SetScrollRange
AdjustWindowRectEx
InflateRect
GetSysColorBrush
GetKeyNameTextA
GetTopWindow
GetDlgItem
SetRect
RemoveMenu
SetClassLongA
ReleaseCapture
GetScrollPos
GetPropA
IsZoomed
DrawIconEx
TrackPopupMenu
SetWindowTextA
GetLastActivePopup
PeekMessageA
MessageBeep
GetMessagePos
GetCapture
SetFocus
MessageBoxA
IsIconic
DrawFrameControl
RedrawWindow
RegisterClipboardFormatA
DefMDIChildProcA
GetMenuItemCount
LoadStringA
GetKeyboardLayoutList
EndPaint
DrawIcon
LoadIconA
IsRectEmpty
SetCapture
SetScrollPos
DestroyCursor
GetClassLongA
GetKeyboardType
SetWindowLongW
LoadBitmapA
GetMenuState
GetKeyboardLayout
PostMessageA
MapWindowPoints
FindWindowA
CharNextA
SetCursor
MoveWindow
GetWindow
GetCursorPos
SetWindowsHookExA
PeekMessageW
EnumThreadWindows
TranslateMDISysAccel
GetSubMenu
GetSystemMetrics
WaitMessage
IsChild
UnregisterClassA
GetWindowLongW
GetActiveWindow
IsWindowVisible
GetFocus
GetWindowPlacement
CallNextHookEx
EnableWindow
SetWindowLongA
IsWindow
ScreenToClient
DrawAnimatedRects
GetScrollRange
DispatchMessageA
GetMenuItemInfoA
EqualRect
DestroyWindow
IntersectRect
EnumWindows
IsDialogMessageW
SendMessageA
ShowScrollBar
SendMessageW
SetPropA
PostQuitMessage
GetWindowTextA
DrawTextA
CharToOemA
GetSystemMenu
DispatchMessageW
SetParent
SetForegroundWindow
CreateMenu
IsWindowUnicode
InvalidateRect
MapVirtualKeyA
CreateWindowExA
SetScrollInfo
GetWindowLongA
DestroyIcon
IsDialogMessageA
BeginPaint
SetWindowPos
GetMenu
ReleaseDC
GetWindowDC
OemToCharA
GetForegroundWindow
GetSysColor
GetWindowThreadProcessId
SetMenu
OffsetRect
CreatePopupMenu
ActivateKeyboardLayout
DeleteMenu
wsprintfA
ClientToScreen
GetMenuItemID
GetScrollInfo
SystemParametersInfoA
GetCursor
TranslateMessage
SetMenuItemInfoA
EnumChildWindows
GetWindowRect
PtInRect
GetKeyboardState
DrawMenuBar
FrameRect
CharUpperBuffA
CheckMenuItem
SetWindowPlacement
InsertMenuA
GetIconInfo
UnhookWindowsHookEx
RemovePropA
GetParent

msvcrt

sqrt
memcmp
memmove
memcpy
sin
wcschr
time
wcscspn
calloc

Sections

CODE
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1132dbd421d5e0d3a9b4a125f2df376a

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

CODE Size: 84KB - Virtual size: 84KB

.rdata Size: 7KB - Virtual size: 6KB

.tls Size: 3KB - Virtual size: 3KB

.bss Size: 2KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 245B

CODE
Size: 84KB - Virtual size: 84KB

.rdata
Size: 7KB - Virtual size: 6KB

.tls
Size: 3KB - Virtual size: 3KB

.bss
Size: 2KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 245B