NEAS[.]383f09b624ae0c4dea5cdd7e953a8a50[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.383f09b624ae0c4dea5cdd7e953a8a50.exe
Size

356KB
MD5

383f09b624ae0c4dea5cdd7e953a8a50
SHA1

769ee6b3a1547687a623d550befcb663435a6ae6
SHA256

1cdaab744b7f47d654695c6d23af5c1b8dd68d956a2ab04fdc474785acd5c839
SHA512

cbff33cbee23978b1ab61cf6bd5f96a1738d59d436b5378248bc2bf15aca255f806bba07d818424c027dc3fa8d798bf5cff36af3254cc0a383b6ef04207fcbbe
SSDEEP

6144:BrUZe+FpWQ85k68D90ItxeoPB4pWrD8C:B7iDTx5B4wrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.383f09b624ae0c4dea5cdd7e953a8a50.exe

Files

NEAS.383f09b624ae0c4dea5cdd7e953a8a50.exe
.dll windows:4 windows x86

973b236d13ff6854373bd0a98bfaf990

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfW

advapi32

RegCloseKey
RegDeleteKeyW
CloseServiceHandle
CreateServiceW
DeleteService
QueryServiceStatus
ControlService
OpenServiceW
OpenSCManagerW
StartServiceW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW

kernel32

GetModuleFileNameA
MapViewOfFile
OpenFileMappingW
OpenMutexW
OpenEventW
CloseHandle
UnmapViewOfFile
GetVersionExW
GetPrivateProfileStringW
GetModuleFileNameW
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetLastError
CreateEventW
DeviceIoControl
OutputDebugStringW
Sleep
ReleaseMutex
SetEvent
WaitForSingleObject
SetLastError
CreateFileW
GetVersion
ReadFile
WriteFile
WideCharToMultiByte
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile

Exports

Exports

AddSiSPrivateKey
AddWepKey
CHARtoHEX
CHtoFREQ
CloseDUT
DoesServiceNeedtobeStopped
FREQtoCH
GetATIMWindow
GetAntennaBB
GetAuthenticationMode
GetBSSID
GetBSSIDList
GetBeaconInterval
GetChannel
GetConnectStatus
GetDUTBBRegister
GetDUTMacRegister
GetDUTPowerControl
GetDUTRFRegister
GetDUTSignalQuality
GetEEPROMType
GetFragmentationThreshold
GetInfrastructureMode
GetMacAddress
GetPowerMode
GetRSSI
GetRTSThreshold
GetReadValue
GetRegDefault_ATIM
GetRegDefault_Antenna
GetRegDefault_Beacon
GetRegDefault_DTIM
GetRegDefault_Distance
GetRegDefault_Fragmentation
GetRegDefault_Listen
GetRegDefault_PowerMode
GetRegDefault_Preamble
GetRegDefault_RTS
GetRegDefault_Region
GetRegDefault_TxRetryCounts
GetRegDefault_Txpower
GetRegDefault_TxpwCh
GetReg_ATIM
GetReg_Antenna
GetReg_AuthenticationMode
GetReg_AuthenticationMode_SWAP
GetReg_AutoPowerSave
GetReg_BasebandMode
GetReg_Beacon
GetReg_Beacon_SWAP
GetReg_Channel
GetReg_Channel_SWAP
GetReg_CustomerDrvName
GetReg_DTIM
GetReg_DTIM_SWAP
GetReg_DeviceGUID
GetReg_DeviceName
GetReg_Distance
GetReg_DrvDate
GetReg_DrvName
GetReg_DrvVersion
GetReg_EncryptionAlgorithm
GetReg_EncryptionAlgorithm1
GetReg_EncryptionAlgorithm1_SWAP
GetReg_EncryptionAlgorithm_SWAP
GetReg_Fragmentation
GetReg_Fragmentation_SWAP
GetReg_InfrastructureMode
GetReg_Key1Length
GetReg_Key1Length_SWAP
GetReg_Key1Status
GetReg_Key2Length
GetReg_Key2Length_SWAP
GetReg_Key2Status
GetReg_Key3Length
GetReg_Key3Length_SWAP
GetReg_Key3Status
GetReg_Key4Length
GetReg_Key4Length_SWAP
GetReg_Key4Status
GetReg_KeyData1
GetReg_KeyData1_SWAP
GetReg_KeyData2
GetReg_KeyData2_SWAP
GetReg_KeyData3
GetReg_KeyData3_SWAP
GetReg_KeyData4
GetReg_KeyData4_SWAP
GetReg_Listen
GetReg_MacFilter
GetReg_NetInfo
GetReg_NetInfoEx
GetReg_NetworkAccess
GetReg_Passphase
GetReg_PassphaseLength
GetReg_Password
GetReg_PowerMode
GetReg_Preamble
GetReg_Preamble_SWAP
GetReg_Profile
GetReg_RFType
GetReg_RTS
GetReg_RTS_SWAP
GetReg_RadioControl
GetReg_Region
GetReg_Region_SWAP
GetReg_SSID
GetReg_SSID_SWAP
GetReg_ServiceCounter
GetReg_SiSTxRate
GetReg_SiSTxRate_SWAP
GetReg_StaSoftAP
GetReg_TransmitKeyIndex
GetReg_TxRetryCounts
GetReg_TxRetryCounts_SWAP
GetReg_Txpower
GetReg_TxpwCh
GetReg_UI_InfrastructureMode
GetReg_WEPStatus
GetReg_WEPStatus_SWAP
GetSSID
GetSiSIBSSList
GetSiSListenInterval
GetSiSPreamble
GetSiSPrivateKeyList
GetSiSRFSwitch
GetSiSStatisticsReset
GetSiSTxRate
GetSiSTxRetryCounts
GetSiSWakeInterval
GetSignalQuality
GetStatistics
GetTxPowerControl
GetWepStatus
GetWlanAdaptersInfo
OpenDUT
PacketAllocatePacket
PacketCloseAdapter
PacketContinuousRx
PacketFreePacket
PacketFreepacket
PacketGetAPCSwitch
PacketGetATIMTxdescAddr
PacketGetAdapterIndex
PacketGetAdapterNames
PacketGetAddrValue
PacketGetBBType
PacketGetBCMCTxdescAddr
PacketGetConnectStatus
PacketGetDCFTxdescAddr
PacketGetDriverVersion
PacketGetEEpromAddrValue
PacketGetEEpromType
PacketGetHardwareStatus
PacketGetHwFilter
PacketGetMoveAverageValue
PacketGetPDOutReference
PacketGetRF2AddrValue
PacketGetRFAddrValue
PacketGetRFType
PacketGetReadValue
PacketGetRegistryValue
PacketGetRegistryValueOld
PacketGetRegistryValue_Default
PacketGetRxAntenaSelect
PacketGetRxEncryptionErrCode
PacketGetRxError
PacketGetRxOk
PacketGetRxdescAddr
PacketGetStats
PacketGetStatsEx
PacketGetSupportListOid
PacketGetTestFIFO
PacketGetTestMode
PacketGetTestModeBeaconTx
PacketGetTestModeSocketTx
PacketGetTxAntenaSelect
PacketGetTxFreedescAddr
PacketGetTxOk
PacketGetUSBTxRxStatus
PacketGetVendorDescription
PacketGetVendorDriverVersion
PacketGetWZCControlFlag
PacketGetWlanATIMWindow
PacketGetWlanAuthenticationMode
PacketGetWlanBSsid
PacketGetWlanBeacon
PacketGetWlanBeginEndChannel
PacketGetWlanBssidList
PacketGetWlanBssidListEx
PacketGetWlanChannel
PacketGetWlanConfiguration
PacketGetWlanDTIMWindows
PacketGetWlanDesiredRates
PacketGetWlanENPE
PacketGetWlanEncryptionStatus
PacketGetWlanFragmentationThreshold
PacketGetWlanIntRoaming
PacketGetWlanLinkSpeed
PacketGetWlanMacAddress
PacketGetWlanMode
PacketGetWlanNetworkTypeSupport
PacketGetWlanPowerMode
PacketGetWlanPrivacyFilter
PacketGetWlanRSSI
PacketGetWlanRSSITrigger
PacketGetWlanRTSThreshold
PacketGetWlanSiSAuthenticationMode
PacketGetWlanSiSBSSSupportRate
PacketGetWlanSiSBasicRate
PacketGetWlanSiSCarrierBand
PacketGetWlanSiSEncryptionStatus
PacketGetWlanSiSIBSSList
PacketGetWlanSiSListenInterval
PacketGetWlanSiSPreamble
PacketGetWlanSiSPrivateKeyList
PacketGetWlanSiSRFSwitch
PacketGetWlanSiSRF_AIROHA_GainSwitch
PacketGetWlanSiSRSSIRange
PacketGetWlanSiSReadHwMacFail
PacketGetWlanSiSReadHwRxFail
PacketGetWlanSiSRegion
PacketGetWlanSiSRoamingRSSITrigger
PacketGetWlanSiSRxRate
PacketGetWlanSiSSignalQuality
PacketGetWlanSiSStatistics
PacketGetWlanSiSTxPowerPerChannel
PacketGetWlanSiSTxRate
PacketGetWlanSiSTxRetryCounts
PacketGetWlanSiSWakeInterval
PacketGetWlanSoftAPAPI
PacketGetWlanSoftAPAssociatedTable
PacketGetWlanSoftAPEventLog
PacketGetWlanSoftAPMacFilter
PacketGetWlanSoftAPOperationMode
PacketGetWlanSoftAPStateControl
PacketGetWlanSsid
PacketGetWlanStatistics
PacketGetWlanSupportRates
PacketGetWlanTxPowerLevel
PacketGetWlanTxRate
PacketGetWlanTypeUse
PacketGetWlanWEPStatus
PacketInitPacket
PacketOpenAdapter
PacketPhyReset
PacketQueryWZCisRunning
PacketReceivePacket
PacketResetInformation
PacketResetRxError
PacketResetRxOk
PacketResetTxOk
PacketSendPacket
PacketSetAPCSwitch
PacketSetAddr
PacketSetAddrValue
PacketSetBCMCTxRateEnable
PacketSetBuff
PacketSetContinuousRx
PacketSetContinuousTx
PacketSetEEpromAddr
PacketSetEEpromType
PacketSetEEpromWriteValue
PacketSetHwFilter
PacketSetMemAddr
PacketSetMoveAverageValue
PacketSetNsmReset
PacketSetNumWrites
PacketSetPDOutReference
PacketSetPowerSaveMode
PacketSetRF2Addr
PacketSetRF2WriteValue
PacketSetRFAddr
PacketSetRFReset
PacketSetRFWriteValue
PacketSetReadTimeout
PacketSetRegistryValue
PacketSetRegistryValueOld
PacketSetRemoveWepKey
PacketSetRxAntenaSelect
PacketSetTestMode
PacketSetTestModeBeaconTx
PacketSetTestModeSocketTx
PacketSetTestPacketSend
PacketSetTxAntenaSelect
PacketSetWZCControlFlag
PacketSetWlanATIMWindow
PacketSetWlanAuthenticationMode
PacketSetWlanBSsid
PacketSetWlanBeacon
PacketSetWlanBeginEndChannel
PacketSetWlanBssidListScan
PacketSetWlanChannel
PacketSetWlanConfiguration
PacketSetWlanDTIMWindows
PacketSetWlanDesiredRates
PacketSetWlanENPE
PacketSetWlanEncryptionStatus
PacketSetWlanFragmentationThreshold
PacketSetWlanMode
PacketSetWlanPowerMode
PacketSetWlanPrivacyFilter
PacketSetWlanRSSITrigger
PacketSetWlanRTSThreshold
PacketSetWlanReloadDefaults
PacketSetWlanSiSBasicRate
PacketSetWlanSiSCarrierBand
PacketSetWlanSiSListenInterval
PacketSetWlanSiSPreamble
PacketSetWlanSiSRFSwitch
PacketSetWlanSiSRF_AIROHA_GainSwitch
PacketSetWlanSiSRegion
PacketSetWlanSiSRoamingRSSITrigger
PacketSetWlanSiSStatisticsReset
PacketSetWlanSiSTestCommand_1
PacketSetWlanSiSTestCommand_2
PacketSetWlanSiSTestCommand_3
PacketSetWlanSiSTestCommand_4
PacketSetWlanSiSTestCommand_5
PacketSetWlanSiSTxPowerPerChannel
PacketSetWlanSiSTxRate
PacketSetWlanSiSTxRetryCounts
PacketSetWlanSiSWakeInterval
PacketSetWlanSoftAPHideSSID
PacketSetWlanSoftAPMacFilter
PacketSetWlanSoftAPOperationMode
PacketSetWlanSoftAPStateControl
PacketSetWlanSsid
PacketSetWlanTxPowerLevel
PacketSetWlanTxRate
PacketSetWlanTypeUse
PacketSetWlanWEPStatus
PacketStartTcpip
PacketStartWZC
PacketStopDriver
PacketStopTcpip
PacketStopWZC
PacketWifiNAVPacket
PacketWifiPLCPPacket
PacketWlanAddSiSWPAPSKKey
PacketWlanAddWEP
PacketWlanAddWPAKey
PacketWlanRemoveWEP
PacketWlanRemoveWPAKey
PacketWlanSiSAddPrivateKey
QueryRxPacketError
QueryRxPacketReceived
QueryTxPacketSent
ReadBBRegister
ReadCFCISData
ReadCISData
ReadEEPROMData
ReadMACAddress
ReadMacRegister
ReadRFRegister
ReadSerialNumber
ReadWlanGBBRegister
Reg_CheckProfileNameExist
Reg_DeleteProfileName
Reg_NumberOfProfileName
Reg_RemoveAllGUIRegistry
ResetPacketCount
ResetRxPacketReceived
ResetTxPacketSent
SendSISPacket
SetATIMWindow
SetAntennaBB
SetAuthenticationMode
SetBSSID
SetBSSIDListScan
SetBeaconInterval
SetCRScrambler
SetChannel
SetDUTBBRegister
SetDUTDataRate
SetDUTMacRegister
SetDUTPowerControl
SetDUTRFRegister
SetDUTSignalQuality
SetDUTmanualDiversityBB
SetEEPROMType
SetFilterBB
SetFragmentationThreshold
SetInfrastructureMode
SetMacAddress
SetPowerMode
SetRTSThreshold
SetReadBBAddr
SetReadCFCISAddr
SetReadEEpromAddr
SetReadRFAddr
SetReg_ATIM
SetReg_Antenna
SetReg_AuthenticationMode
SetReg_AuthenticationMode_SWAP
SetReg_AutoPowerSave
SetReg_BasebandMode
SetReg_Beacon
SetReg_Beacon_SWAP
SetReg_Channel
SetReg_Channel_SWAP
SetReg_DTIM
SetReg_DTIM_SWAP
SetReg_DeviceGUID
SetReg_DeviceName
SetReg_Distance
SetReg_EncryptionAlgorithm
SetReg_EncryptionAlgorithm1
SetReg_EncryptionAlgorithm1_SWAP
SetReg_EncryptionAlgorithm_SWAP
SetReg_Fragmentation
SetReg_Fragmentation_SWAP
SetReg_InfrastructureMode
SetReg_Key1Length
SetReg_Key1Length_SWAP
SetReg_Key1Status
SetReg_Key2Length
SetReg_Key2Length_SWAP
SetReg_Key2Status
SetReg_Key3Length
SetReg_Key3Length_SWAP
SetReg_Key3Status
SetReg_Key4Length
SetReg_Key4Length_SWAP
SetReg_Key4Status
SetReg_KeyData1
SetReg_KeyData1_SWAP
SetReg_KeyData2
SetReg_KeyData2_SWAP
SetReg_KeyData3
SetReg_KeyData3_SWAP
SetReg_KeyData4
SetReg_KeyData4_SWAP
SetReg_KeyStatus
SetReg_Listen
SetReg_MacFilter
SetReg_NetInfoEx
SetReg_NetworkAccess
SetReg_NumberOfAdapter
SetReg_Passphase
SetReg_PassphaseLength
SetReg_Password
SetReg_PowerMode
SetReg_Preamble
SetReg_Preamble_SWAP
SetReg_Profile
SetReg_RTS
SetReg_RTS_SWAP
SetReg_RadioControl
SetReg_RegIndex
SetReg_Region
SetReg_Region_SWAP
SetReg_SSID
SetReg_SSID_SWAP
SetReg_ServiceCounter
SetReg_SiSTxRate
SetReg_SiSTxRate_SWAP
SetReg_StaSoftAP
SetReg_TransmitKeyIndex
SetReg_TxPowerFromRegistry
SetReg_TxRetryCounts
SetReg_TxRetryCounts_SWAP
SetReg_Txpower
SetReg_TxpwCh
SetReg_UI_InfrastructureMode
SetReg_WEPStatus
SetReg_WEPStatus_SWAP
SetSSID
SetSendPacketFormat
SetSiSListenInterval
SetSiSPreamble
SetSiSRFSwitch
SetSiSTxRate
SetSiSTxRetryCounts
SetSiSWakeInterval
SetSingleCarrierTxContinuous
SetSleepModeDirectCall
SetStartSendPacketFormat
SetTxConfig
SetTxContinuous
SetTxPowerControl
SetWakeModeDirectCall
SetWepStatus
StopTest
WriteBBRegister
WriteCFCISRegister
WriteCISData
WriteEEPROMData
WriteMACAddress
WriteMacRegister
WriteRFRegister
WriteSerialNumber
WriteWlanGBBRegister

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

973b236d13ff6854373bd0a98bfaf990

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 92KB - Virtual size: 95KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 20KB - Virtual size: 18KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 92KB - Virtual size: 95KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 20KB - Virtual size: 18KB

.rmnet
Size: 60KB - Virtual size: 60KB