NEAS[.]f522a33a71f00ac3611e5378b06255f0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.f522a33a71f00ac3611e5378b06255f0.exe
Size

55KB
MD5

f522a33a71f00ac3611e5378b06255f0
SHA1

2602dff8870ba8696de46ebff18f7de813ba305c
SHA256

538c2e95f8cf1cf9daeab1146296b2a9eb4cd523884faddaf668952e91196584
SHA512

7df013f66f23ab0079d056f7d2c915e074b0676b1d046a534c8cb235e722cffb5696f6a60f73dbdbd5c60a63a565341e51d6afde596ce51200de93b96820c031
SSDEEP

768:HIU4YgM7BMQUL4dpaeOfrcP73wZTkcguYMSl8/EExwmuHa39ciEHoRDcW9o24fQD:FHgoBAL4S9bZTUJ8XxwmuHa3mzqcvst/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f522a33a71f00ac3611e5378b06255f0.exe

Files

NEAS.f522a33a71f00ac3611e5378b06255f0.exe
.exe windows:5 windows x86

31632a87952bc989ed55d94788bc4f2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ord2
ExtractAssociatedIconA
ord62
ShellExecuteExA
ord189
ord155
DragAcceptFiles
ShellAboutA
ord4
DragQueryFileA
DragFinish

olecli32

ord4
ord27
ord2
ord39
ord37
ord35
ord25
ord3
ord22
ord32
ord29
ord42
ord15
ord14
ord36
ord21
ord41
ord43
ord44
ord28
ord9
ord13
ord18
ord10
ord45
ord20
ord46
ord19
ord11
ord23
ord12
ord6
ord40
ord24

olesvr32

ord4
ord7
ord10
ord5
ord2
ord6
ord3
ord8

advapi32

RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegQueryValueA
RegSetValueA

wininet

CommitUrlCacheEntryA
CreateUrlCacheEntryA
DeleteUrlCacheEntry

shdocvw

ord229

msvcrt

_vsnprintf
memmove
strchr
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

kernel32

LoadLibraryA
CreateFileW
FindFirstFileA
GetModuleHandleA
lstrcmpA
WideCharToMultiByte
GetStartupInfoA
GlobalAddAtomA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GetSystemTime
SystemTimeToFileTime
GlobalHandle
RaiseException
Sleep
_lopen
_lread
MultiByteToWideChar
AddAtomA
CreateThread
GetFileAttributesA
SetFileAttributesA
GetAtomNameA
DeleteAtom
DeleteFileA
WaitForSingleObject
CloseHandle
GetLastError
GlobalAlloc
GlobalDeleteAtom
FreeLibrary
InterlockedExchange
FindClose
_lwrite
lstrcpyA
GlobalReAlloc
lstrcatA
GetACP
MulDiv
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GlobalFree
lstrcmpiA
GlobalLock
GlobalUnlock
OpenFile
_lcreat
_llseek
_lclose
GetProcAddress
lstrlenA

gdi32

SetBkMode
SetTextAlign
TextOutA
CopyMetaFileA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetTextColor
SetBkColor
SelectObject
PatBlt
GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
GetLayout
SetLayout

user32

ScrollWindow
GetScrollRange
CharNextA
OffsetRect
PeekMessageA
EnumThreadWindows
SetFocus
IsRectEmpty
RegisterClipboardFormatA
SetRectEmpty
DrawIcon
GetMenu
SendDlgItemMessageA
GetDlgItemTextA
CheckDlgButton
DestroyIcon
CharUpperBuffA
CharLowerA
GetSysColorBrush
IsWindowVisible
LoadStringW
GetKeyState
ReleaseDC
GetDC
CreateWindowExA
LoadStringA
LoadCursorA
GetDlgItem
LoadAcceleratorsA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
SendMessageA
ShowWindow
GetTopWindow
GetSystemMetrics
MessageBoxA
DialogBoxParamA
IsWindow
GetClientRect
SetDlgItemTextA
EndDialog
SetWindowTextA
EnableMenuItem
DestroyMenu
InsertMenuA
CreatePopupMenu
DeleteMenu
IsClipboardFormatAvailable
GetSubMenu
PostQuitMessage
LoadIconA
InvalidateRect
CloseClipboard
GetClipboardData
OpenClipboard
PostMessageA
DefWindowProcA
RegisterClassA
DestroyWindow
EnableScrollBar
EnableWindow
CheckRadioButton
SetScrollPos
GetScrollPos
IsDlgButtonChecked
SetWindowPos
GetWindowDC
SetClipboardData
EmptyClipboard
SystemParametersInfoA
EndPaint
FillRect
SetRect
BeginPaint
ReleaseCapture
ScreenToClient
SetCursor
SetCapture
IsIconic
DrawTextA
GetSysColor
UpdateWindow
BringWindowToTop
IsWindowEnabled
DrawFocusRect

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��PJ�
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

31632a87952bc989ed55d94788bc4f2f

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

shell32

olecli32

olesvr32

advapi32

wininet

shdocvw

msvcrt

kernel32

gdi32

user32

Sections

.text Size: 46KB - Virtual size: 45KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 7KB

���PJ� Size: 224KB - Virtual size: 224KB

.text
Size: 46KB - Virtual size: 45KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 7KB

��PJ�
Size: 224KB - Virtual size: 224KB