NEAS[.]d5396ccafa184b66d5a55ac1b3d5c7c0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5396ccafa184b66d5a55ac1b3d5c7c0.exe
Size

512KB
MD5

d5396ccafa184b66d5a55ac1b3d5c7c0
SHA1

dcf65359b9ed2f2ccc76e8b4708de6d3b1d69b00
SHA256

7550b1f091e5dba77e09e448f84a38468018aa4add3131d5c29468e2e1ff945f
SHA512

b2d0d9af83d157d98a6dec591ac8f8d13a96662881805a11aa4bbdd4a6e21eb50782110205440c5063acc64c73c0e114c2e53f9343e9536ec753681e55ae8ee9
SSDEEP

12288:bLgJzehRILw/pxzJc+/dcnNy3/Z9CcTIaOye:bLgsIAenwPPEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5396ccafa184b66d5a55ac1b3d5c7c0.exe

Files

NEAS.d5396ccafa184b66d5a55ac1b3d5c7c0.exe
.exe windows:4 windows x86

256d789a2093b75fb4065671853a4f9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA
RpcStringFreeA

comctl32

InitCommonControlsEx
ord17
CreateToolbarEx

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

LocalReAlloc
TlsGetValue
TlsSetValue
GetCurrentProcess
DeleteFileA
FindClose
TlsAlloc
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
RemoveDirectoryA
FindFirstFileA
GetCommandLineA
HeapReAlloc
GetCPInfo
GetLocalTime
SetEnvironmentVariableA
GetProcessVersion
GlobalFlags
GetEnvironmentVariableA
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
FreeLibrary
MultiByteToWideChar
lstrlenW
GetPrivateProfileStringA
lstrcpyA
lstrcatA
lstrcmpiA
lstrlenA
GetTempPathA
GetTempFileNameA
WinExec
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
GetCurrentThreadId
SetLastError
GetVersion
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
InterlockedIncrement
GlobalDeleteAtom
GetModuleHandleA
SetEndOfFile
InterlockedDecrement
FlushFileBuffers
SetFilePointer
SetFileAttributesA
WriteFile
CreateProcessA
lstrcmpA
RaiseException
WideCharToMultiByte
GetProcAddress
InterlockedExchange
LocalAlloc
ResetEvent
WaitForSingleObject
SetEvent
GetProfileStringA
CreateEventA
LocalFree
GetLastError
GetVersionExA
lstrcpynA
GlobalMemoryStatus
FormatMessageA
GlobalReAlloc
GetTickCount
CopyFileA
GetPrivateProfileIntA
Sleep
WritePrivateProfileStringA
ReadFile
CreateFileA
GlobalAlloc
CloseHandle
_llseek
GlobalHandle
GlobalLock
_hread
FreeResource
GlobalUnlock
GlobalFree
HeapDestroy
GetShortPathNameA
DeleteCriticalSection
SizeofResource
InitializeCriticalSection
FindResourceA
_hwrite
LoadResource
LockResource
FileTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
_lopen
GetTimeZoneInformation
GetWindowsDirectoryA
_lwrite
_lcreat
_lread
GetModuleFileNameA
GetFileAttributesA
LoadLibraryA
GetACP
_lclose
HeapSize
CreateDirectoryA
GetStartupInfoA
GetSystemTime

user32

GetTopWindow
GetClassInfoA
AdjustWindowRectEx
GetSysColorBrush
DestroyIcon
DestroyMenu
TabbedTextOutA
GrayStringA
CharUpperBuffA
GetScrollInfo
PtInRect
GetCapture
InvertRect
EnableScrollBar
SetActiveWindow
IsWindow
ReleaseCapture
RegisterWindowMessageA
ClientToScreen
GetDesktopWindow
PeekMessageA
CreateDialogParamA
GetScrollPos
ScrollWindow
SetScrollPos
GetDC
ReleaseDC
CopyRect
InflateRect
DrawTextExA
DestroyWindow
SetScrollRange
DestroyCursor
GetWindowTextA
IsCharAlphaA
CharUpperA
IsCharAlphaNumericA
GetWindowPlacement
SetWindowPlacement
GetSysColor
CallWindowProcA
GetWindowTextLengthA
IsRectEmpty
GetCursorPos
FillRect
wsprintfA
GetActiveWindow
PostMessageA
CallNextHookEx
CheckMenuItem
GetMenuItemID
EnableMenuItem
PostQuitMessage
IsIconic
DefWindowProcA
SetRectEmpty
InvalidateRect
LoadIconA
RegisterClassA
LoadAcceleratorsA
SetWindowsHookA
OffsetRect
GetSystemMetrics
UnhookWindowsHook
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadStringA
ShowWindow
GetWindowRect
MapWindowPoints
MoveWindow
SendDlgItemMessageA
SetWindowTextA
GetWindow
GetDlgItemTextA
CharLowerA
SetDlgItemTextA
GetDlgItemInt
LoadCursorA
SetCursor
MessageBeep
SetFocus
CheckDlgButton
SetDlgItemInt
CheckRadioButton
IsDlgButtonChecked
GetDlgItem
EndDialog
LoadBitmapA
SetWindowPos
CreateWindowExA
SetWindowLongA
GetParent
GetWindowLongA
SetRect
DrawTextA
BeginPaint
SystemParametersInfoA
UnhookWindowsHookEx
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
GetNextDlgTabItem
EndPaint
GetMenu
GetSubMenu
EnableWindow
UpdateWindow
MessageBoxA
SendMessageA
DialogBoxParamA
GetClientRect
IsWindowVisible
WinHelpA
GetDlgCtrlID
SetWindowsHookExA
GetClassLongA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetMenuItemCount
GetMenuItemInfoA
SetMenu
WaitForInputIdle
RemovePropA
DrawMenuBar
GetPropA
GetKeyState
SetPropA
GetClassNameA
IsWindowEnabled
IsDialogMessageA
GetFocus
SetClipboardData
OpenClipboard
EmptyClipboard
KillTimer
CloseClipboard
SetTimer
ScreenToClient
GetScrollRange
GetCursor
IsCharUpperA
IsCharLowerA
SetCapture

gdi32

BitBlt
SetBkMode
SelectObject
GetObjectA
MoveToEx
SetTextColor
LineTo
Rectangle
SetROP2
TextOutA
SetBkColor
SetTextAlign
CreateSolidBrush
CreateFontIndirectA
SetWindowOrgEx
CreatePalette
ExtTextOutA
SelectClipRgn
SetRectRgn
GetTextExtentPointA
GetTextMetricsA
CreateRectRgn
PatBlt
CreatePatternBrush
CreateCompatibleDC
CreateBitmap
GetStockObject
GetWindowOrgEx
LPtoDP
SetViewportOrgEx
GetWindowExtEx
SetMapMode
SetViewportExtEx
EnumFontFamiliesA
RealizePalette
GetDeviceCaps
CreateFontA
GetCharWidthA
SelectPalette
CreateDIBitmap
StretchDIBits
StretchBlt
CreateICA
SetStretchBltMode
StartPage
StartDocA
EndPage
AbortDoc
CreateDCA
EndDoc
GetClipBox
GetTextAlign
RestoreDC
SaveDC
ScaleViewportExtEx
OffsetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
PtVisible
RectVisible
Escape
DeleteObject
CreatePen
DeleteDC

comdlg32

GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA
DeviceCapabilitiesA
GetPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA

shell32

ExtractIconA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHChangeNotify
ShellExecuteA

ole32

CoRegisterClassObject
CoRevokeClassObject
StgCreateDocfile
StringFromGUID2
CoTaskMemAlloc
CoDisconnectObject
OleInitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
StringFromCLSID
CoUninitialize
OleSetMenuDescriptor

oleaut32

SysStringLen
GetErrorInfo
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
VariantInit
SysStringByteLen
RegisterTypeLi
SysAllocString
LoadRegTypeLi
SysAllocStringByteLen
LoadTypeLi

Sections

.text
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

256d789a2093b75fb4065671853a4f9d

Headers

File Characteristics

Imports

rpcrt4

comctl32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 300KB - Virtual size: 296KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 44KB - Virtual size: 63KB

.rsrc Size: 96KB - Virtual size: 95KB

.text
Size: 300KB - Virtual size: 296KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 44KB - Virtual size: 63KB

.rsrc
Size: 96KB - Virtual size: 95KB