NEAS[.]d247dedffbf06ccc9a8d544c1f14ecc0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d247dedffbf06ccc9a8d544c1f14ecc0.exe
Size

724KB
MD5

d247dedffbf06ccc9a8d544c1f14ecc0
SHA1

94dcd57668bf46e74d48009dabce8d98c7888ef3
SHA256

c37d98641e428b966af229d8758f6cebde96e53caf9a93a8bfc14620c268a10f
SHA512

7fb3835388619869a8b929d6cde21a52318089132296a3da7a2b0d4c3f8b6cb5b5e50f53192bc923d321bf081f2205ed741038cb043fc95a6aaed0a49b7cf0fe
SSDEEP

12288:ZnWWJfylVsznF7N6GoPmRuAoENk5eVkU4Cd34gjQBaD+h89:ZnjKlVsznF7O4oELVkU4CJjDyh89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d247dedffbf06ccc9a8d544c1f14ecc0.exe

Files

NEAS.d247dedffbf06ccc9a8d544c1f14ecc0.exe
.exe windows:4 windows x86

527f41c3448c56608765226035394578

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

socket
WSAGetLastError
getpeername
bind
send
connect
getsockname
inet_addr
closesocket
recv
gethostbyname
gethostname
WSAStartup
WSACleanup

kernel32

GetCurrentProcessId
GetACP
HeapReAlloc
CreateDirectoryA
RaiseException
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
GetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
ExitProcess
GetVersionExA
GetStartupInfoA
HeapAlloc
HeapFree
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
WritePrivateProfileStringA
SetErrorMode
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetProcessVersion
FindResourceExA
SizeofResource
GlobalFlags
GlobalAlloc
GetProfileStringA
lstrcpynA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
MulDiv
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
CreateProcessA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
SetLastError
WinExec
SetFileAttributesA
DeviceIoControl
WriteFile
ReadFile
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
GetFullPathNameA
CreateFileA
DeleteFileA
GetCurrentDirectoryA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GetEnvironmentVariableA
MultiByteToWideChar
WideCharToMultiByte
OpenFile
CreateFileMappingA
CloseHandle
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetModuleFileNameA
LocalAlloc
lstrcmpA
lstrlenA
GetVersion
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetProcessAffinityMask
SetThreadAffinityMask
GetCurrentThread
GetLastError
FormatMessageA
LocalFree
Sleep
SetHandleCount

user32

TranslateMessage
GetMessageA
DestroyMenu
GetClassNameA
PtInRect
GetSysColorBrush
InflateRect
InvalidateRect
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetDC
ReleaseDC
wvsprintfA
CharToOemA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
ValidateRect
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetAsyncKeyState
GetFocus
SetFocus
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetTimer
KillTimer
MessageBeep
GetWindowTextA
GetCursorPos
PostQuitMessage
LoadStringA
PostMessageA
EnumWindows
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
LoadIconA
MessageBoxA
GetCursor
LoadCursorA
SetCursor
LoadBitmapA
SendMessageA
EnableWindow
UnregisterClassA
GetMenuItemID

gdi32

IntersectClipRect
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
EnumFontFamiliesExA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetBkMode
GetStockObject
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
StartDocA
StartPage
SaveDC
SetMapMode
CreateFontA
SelectObject
CreatePen
GetTextExtentPoint32A
TextOutA
Rectangle
RestoreDC
DeleteObject
EndPage
EndDoc
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
DeleteDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
PrintDlgA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
QueryServiceConfigA
OpenServiceA
OpenSCManagerA
CloseServiceHandle
StartServiceA
ControlService
EnumServicesStatusExA
RegSetValueA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegSetKeySecurity
SetFileSecurityA
RegCreateKeyA
RegQueryInfoKeyA
RegEnumValueA
QueryServiceStatus
GetUserNameA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA

comctl32

ImageList_AddMasked
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_Create

netapi32

Netbios

rpcrt4

UuidCreate

Sections

.text
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

527f41c3448c56608765226035394578

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

netapi32

rpcrt4

Sections

.text Size: 488KB - Virtual size: 484KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 164KB - Virtual size: 247KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: 488KB - Virtual size: 484KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 164KB - Virtual size: 247KB

.rsrc
Size: 24KB - Virtual size: 22KB