NEAS[.]6e237b392c896636e152f7d91a4f1e30[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6e237b392c896636e152f7d91a4f1e30.exe
Size

209KB
MD5

6e237b392c896636e152f7d91a4f1e30
SHA1

8303c9d05a90bb3a1a40f4317493ff6e36d93fdb
SHA256

8dee929b3049a971350a6da0c32b601b3ac9090fbbd8e3a5c83c17bc5212009a
SHA512

cdb6ee8ff66f808b349c55b68736699853558ad4beb1654705c2d453b81e94163a9e6317d69ae5ebf2b53729c3b354291734ce10971677645d990e531116b9ad
SSDEEP

3072:MGvt50TojQKqvRAesHneOKIQwOmdDgmrJn3OXmaMfJVgCJ9pVtec6RaGI8zbie4:5lYodq5ROm8rR3OdMBOCnftec2I8r4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e237b392c896636e152f7d91a4f1e30.exe

Files

NEAS.6e237b392c896636e152f7d91a4f1e30.exe
.exe windows:4 windows x86

c5e2f040dd0dcb543edd6ef8ec77c168

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapFree
ExitProcess
HeapAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
GetOEMCP
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleA
GetCPInfo
GetACP
MulDiv
LocalReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
SetErrorMode
GetVersionExA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetProcessVersion
SetLastError
lstrcpyA
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
lstrcpynA
VirtualFree
TlsSetValue
GlobalLock
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
CloseHandle
GetStartupInfoA
GetLastError
CreateMutexA
Sleep
CreateProcessA
GlobalAlloc
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom

user32

TabbedTextOutA
GetDC
ReleaseDC
BeginPaint
DrawTextA
GrayStringA
EndPaint
ShowWindow
GetSystemMetrics
LoadCursorA
GetSysColorBrush
LoadStringA
CharUpperA
EndDialog
DestroyMenu
InvalidateRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
IsWindow
IsChild
GetCapture
WinHelpA
SetWindowTextA
GetDesktopWindow
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetWindowPlacement
GetWindowPlacement
GetDlgItem
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
MessageBoxA
EnableWindow
SetCursor
ShowOwnedPopups
SendMessageA
PostQuitMessage
PostMessageA
FindWindowA
IsIconic
GetForegroundWindow
SetForegroundWindow
PtInRect
GetClassNameA
LoadIconA
UpdateWindow
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetActiveWindow
ClientToScreen
wsprintfA
GetClassInfoA
GetTopWindow
IsWindowEnabled
GetMenu
GetWindowTextA
WindowFromPoint
UnregisterClassA

gdi32

SetTextColor
GetObjectA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateBitmap
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkColor

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c5e2f040dd0dcb543edd6ef8ec77c168

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 104KB - Virtual size: 104KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 104KB - Virtual size: 104KB