NEAS[.]47edc99b20a0ff9154ea6f8b3b35bd40[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.47edc99b20a0ff9154ea6f8b3b35bd40.exe
Size

127KB
MD5

47edc99b20a0ff9154ea6f8b3b35bd40
SHA1

b101dbeb2e73f44f9dd24327f709c235e0769f6a
SHA256

97f7191289edb57d5c2efb6cf1ff0fc57236d4359380491ec11ff56cfcae9abf
SHA512

41d10d5e7111da56802525a27e28fc96b14a6d5e95112e6dfb41dcd6189bc6ff02fc0d88abd27f4260ca52b2c30009fb6e710b0e247a1205089b3e71149c635d
SSDEEP

3072:BUQ8I7nYTaNLgmgF7KheXT73iWLxBFDFkkY7sGoG7lQf:BUQ8somOX3ZLrrY7sc7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.47edc99b20a0ff9154ea6f8b3b35bd40.exe

Files

NEAS.47edc99b20a0ff9154ea6f8b3b35bd40.exe
.exe windows:6 windows x86

06cf8467a8e23c95ac1d81acd6b68870

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp140

?_Xlength_error@std@@YAXPBD@Z

mfc140u

ord7941
ord2034
ord11982
ord11983
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord13911
ord995
ord6860
ord1111
ord4092
ord952
ord1113
ord2205
ord1405
ord7313
ord5763
ord10250
ord1525
ord5760
ord9235
ord12173
ord462
ord6533
ord9139
ord14234
ord11038
ord12131
ord6218
ord13752
ord2760
ord9210
ord9040
ord11015
ord11396
ord10472
ord3404
ord3403
ord3164
ord3697
ord3359
ord3237
ord6801
ord2215
ord2246
ord1692
ord3605
ord5549
ord5249
ord2304
ord6489
ord358
ord2520
ord450
ord13085
ord13293
ord14042
ord13070
ord6834
ord3257
ord4236
ord1446
ord9135
ord890
ord12947
ord6486
ord4815
ord6973
ord8773
ord8776
ord3957
ord4886
ord12168
ord3265
ord2486
ord3372
ord3941
ord12124
ord2682
ord5419
ord14137
ord7820
ord5935
ord13703
ord13028
ord11717
ord6877
ord14596
ord7923
ord14590
ord3055
ord4494
ord9693
ord5790
ord4502
ord4988
ord4927
ord4912
ord4974
ord5019
ord4942
ord4997
ord5013
ord4954
ord4960
ord4966
ord4948
ord5003
ord4936
ord1777
ord1756
ord1770
ord1744
ord1722
ord12258
ord12262
ord13878
ord3266
ord9256
ord11002
ord6978
ord12220
ord8965
ord14588
ord11936
ord3833
ord3838
ord12089
ord11726
ord11725
ord5652
ord10288
ord10284
ord10286
ord10287
ord10285
ord14785
ord4090
ord4152
ord9398
ord14595
ord7922
ord14589
ord12542
ord1391
ord12541
ord2761
ord8210
ord10255
ord3302
ord3305
ord13756
ord6220
ord7654
ord6129
ord6559
ord3882
ord10379
ord5357
ord8324
ord7997
ord4589
ord12865
ord12928
ord9209
ord10433
ord12247
ord8219
ord8386
ord1472
ord7653
ord5409
ord8470
ord13442
ord12219
ord12251
ord8217
ord12239
ord5918
ord3852
ord4664
ord4663
ord7712
ord7723
ord1523
ord7722
ord5228
ord1045
ord296
ord1663
ord5921
ord285
ord3009
ord6566
ord5411
ord4882
ord3371
ord2522
ord5252
ord5525
ord1002
ord9350
ord2409
ord7495

kernel32

DeleteCriticalSection
WriteFile
ExpandEnvironmentStringsW
WaitForSingleObject
GetLastError
InitializeCriticalSectionEx
OutputDebugStringW
WideCharToMultiByte
CreateFileW
CreateEventW
Sleep
SetEvent
DeleteFileW
CloseHandle
CreateThread
ResetEvent
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
IsProcessorFeaturePresent

user32

GetSysColor
RedrawWindow
SetTimer
OffsetRect
IsWindow
UpdateWindow
SetCursor
GetWindowRect
IsIconic
SetForegroundWindow
LoadIconW
DrawIcon
GetSystemMetrics
InvalidateRect
GetClientRect
FillRect
KillTimer
SendMessageW
EnableWindow
GetParent

gdi32

DeleteObject
GetObjectW
SetViewportOrgEx
Rectangle
CreateSolidBrush
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontIndirectW
GetViewportOrgEx

shell32

ShellExecuteW
ShellExecuteExW

comctl32

InitCommonControlsEx

libcurl

curl_global_init
curl_easy_getinfo
curl_easy_perform
curl_easy_init
curl_easy_cleanup
curl_easy_setopt

vcruntime140

__std_exception_copy
__std_terminate
__current_exception
__current_exception_context
__std_exception_destroy
memset
_except_handler4_common
_CxxThrowException
memmove
__CxxFrameHandler3
memcpy

api-ms-win-crt-stdio-l1-1-0

fclose
_wfopen_s
fread
__p__commode
_set_fmode
__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_c_exit
exit
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_cexit
_set_app_type
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv

api-ms-win-crt-string-l1-1-0

_wcsupr_s
wcstok_s
wcscpy_s

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
_set_new_mode
free

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

06cf8467a8e23c95ac1d81acd6b68870

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

mfc140u

kernel32

user32

gdi32

shell32

comctl32

libcurl

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 71KB - Virtual size: 72KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 71KB - Virtual size: 72KB