NEAS[.]8ed300e97221be55abbf2909a38317d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ed300e97221be55abbf2909a38317d0.exe
Size

1.5MB
MD5

8ed300e97221be55abbf2909a38317d0
SHA1

8f81e5e05b089d87b738bd930bbdcd2a61bb240b
SHA256

08c665aaeb433c00bf8fca318f04e013d4b44a0f5b4a66d26ed2b9c451d0d608
SHA512

3b85c7ae64001a1ca0c5d28b693c2a25374ed65b2584e48cf418ffb5978ce4fc673f7e362c75409c98803c699bed99690f0df82dcb89f4d5029360bb803eb52e
SSDEEP

24576:jUi9f4RpQxf1kU8J5rr8U5vn5YC/FmUoDwVKndfrEH77:vfnf1/8J5XLzFmUoDwVqdy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ed300e97221be55abbf2909a38317d0.exe

Files

NEAS.8ed300e97221be55abbf2909a38317d0.exe
.dll windows:5 windows x86

92a98f186ea7bd04f5c743460fd32988

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
CreateEventA
GetSystemTimeAsFileTime
GetProcessHeap
WaitForSingleObjectEx
SetEvent
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
CloseHandle
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
ReleaseSemaphore
WaitForMultipleObjectsEx
GetModuleHandleW
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
InterlockedExchangeAdd
GetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
LocalFree
FormatMessageA
SetEndOfFile
SetFilePointerEx
CreateFileW
FindClose
RemoveDirectoryW
DeleteFileW
DeviceIoControl
GetFullPathNameW
FindFirstFileW
FindNextFileW
GetEnvironmentVariableW
GetFileAttributesW
CreateDirectoryExW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
GetFileTime
SetFileTime
SetFileAttributesW
MoveFileExW
GetDiskFreeSpaceExW
CreateDirectoryW
GetWindowsDirectoryW
AreFileApisANSI
GetSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
SetWaitableTimer
GetModuleHandleA
ResetEvent
CreateWaitableTimerA
OpenEventA
ResumeThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetTimeFormatA
GetDateFormatA
GetCommandLineA
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
SetLastError
GetCurrentThread
ExitThread
CreateThread
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
HeapSize
ExitProcess
GetStringTypeA
GetStringTypeW
WriteFile
GetStdHandle
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
SetConsoleCtrlHandler
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA

flashtoollibex

flashtool_reconnect_com
flashtool_format
flashtool_pl_chanllenge
flashtool_read_partition_table
flashtool_format_partition
flashtool_destroy_session
_flashtool_connect_brom_with_handle@20
flashtool_if_lib_da_match
flashtool_tell_device_change_com
flashtool_connect_da
flashtool_get_rsc_info
flashtool_firmware_update
flashtool_get_hrid
_flashtool_trans_modem_type@12
_meta_start_boot_mode@28
flashtool_device_control
flashtool_set_log_folder
flashtool_create_session
flashtool_startup
_flashtool_efuse_read_all@8
flashtool_get_lib_info
flashtool_connect_brom
flashtool_set_log_level
flashtool_otp_zone_operation
flashtool_get_scatter_info
flashtool_set_rsc_info
flashtool_memory_test
flashtool_download_cert
flashtool_get_device_info
_flashtool_efuse_write_all@8
flashtool_shutdown_device
flashtool_create_session_with_handle
flashtool_set_scatter_path
flashtool_get_rsc_cnt
flashtool_set_ufs_config
flashtool_image_checksum
flashtool_get_last_errmsg
flashtool_get_rpmb_status
_flashtool_is_chiptype_match@20
_flashtool_customize_impl@8
get_revised_scatter_partitions
flashtool_get_com_handle
flashtool_readback
_flashtool_set_last_errmsg@8
flashtool_upgrade
flashtool_write_data

Exports

Exports

AUTH_Create
AUTH_Destroy
AUTH_GetInfo
AUTH_IsReady
AUTH_Load
AUTH_LoadBuf
AUTH_SetCallback
AUTH_Unload
AddrTypeFlagToString
BBChipTypeFromBBChipName
BBChipTypeToName
BROM_USBEnumToString
BootROM_BootMode
Boot_FlashTool
Boot_META
Brom_Checksum16Cmd
Brom_Connect
Brom_Create
Brom_DebugClear
Brom_DebugOff
Brom_DebugOn
Brom_Debug_SetLogFilename
Brom_Debug_SetLogPrefix
Brom_Destroy
Brom_DisConnect
Brom_DownloadData
Brom_DownloadData_Ex
Brom_GetDLLInfo
Brom_GetDLLVer
Brom_JumpCmd
Brom_JumpCmd_Ex
Brom_Read16Cmd
Brom_Read32Cmd
Brom_ReadEfuseAll
Brom_Rehabilitate
Brom_SendSCERT
Brom_SendSCERTWithHandle
Brom_SetWatchDogTimeout
Brom_StartCmd
Brom_WrapDeInitCmd
Brom_WrapInitCmd
Brom_WrapRead16Cmd
Brom_WrapWrite16Cmd
Brom_Write16Cmd
Brom_Write32Cmd
Brom_WriteEfuseCommon
Brom_WriteEfuseLock
Brom_WriteEfuseSecure
ChipTypeToString
ComPortEnumerate
ComPortEnumerateByArg
ComPortEnumerateEx
ComPortEnumerateWithPrefix
ConvertDAReportToString
DA_Create
DA_Destroy
DA_GetInfo
DA_IsReady
DA_Load
DA_LoadBuf
DA_Parsing
DA_SetCallback
DA_SetDefaultStartAddr
DA_Unload
DL_AddHandleToList
DL_AutoLoadByScatRegionName
DL_AutoLoadRomImages
DL_BL_EXT_Load
DL_BL_GetInfo
DL_BL_IsReady
DL_BL_Load
DL_BL_SetEnableAttr
DL_CalculateROMsMemBuf
DL_CheckHandleInList
DL_CheckHandleSameSWVersionInList
DL_CheckSecUnlockSecro
DL_ClearFTHandle
DL_Create
DL_CreateList
DL_DeleteHandleFromList
DL_Destroy
DL_DestroyList
DL_GetBBChipName
DL_GetBBChipType
DL_GetBMTBlockCount
DL_GetChecksumLevel
DL_GetChecksumVerify_Callback
DL_GetCount
DL_GetCustomName
DL_GetDRAMSetting
DL_GetFTHandle
DL_GetHandleFromList
DL_GetHandleNumber
DL_GetInfo
DL_GetJumpTableInfo
DL_GetPlatformInfo
DL_GetProjectId
DL_GetRemoteGetFileLen_Callback
DL_GetRemoteReadFile_Callback
DL_GetScatterInfo
DL_GetScatterVersion
DL_Get_ChipVersion
DL_Get_PlatformName
DL_Get_PreloaderFilePath
DL_Get_ScatterFilePath
DL_ImgTypeTblEntryAdd
DL_ImgTypeTblEntryList
DL_ImgTypeTblEntryReset
DL_IsComboSCI
DL_IsHaveLoadScatter
DL_IsNFB
DL_IsReady
DL_LoadSCIScatter
DL_LoadScatter
DL_ResourceProjectIdComparisonSetting
DL_Rom_GetInfo
DL_Rom_GetInfoAll
DL_Rom_GetResInfo
DL_Rom_Load
DL_Rom_SetEnableAttr
DL_Rom_SetEnableAttrByRomName
DL_Rom_Unload
DL_Rom_UnloadAll
DL_SetCallback
DL_SetChecksumEnable
DL_SetChecksumLevel
DL_SetPacketLength
DL_SetStopLoadFlag
DL_VerifyROMMemBuf
EmmcPartToString
EraseFlagToString
ExtClockToName
FlashDownload
FlashDownload_ByhCOM
FlashFormat
FlashFormat_ByhCOM
FlashParameter
FlashParameter_ByhCOM
FlashReadback
FlashReadback_ByhCOM
FlashTool_ChangeBaudrate
FlashTool_ChangeCOM
FlashTool_ChangeCOM_Ex
FlashTool_CheckUSBStatus
FlashTool_Check_Battery
FlashTool_Chip_isOldArch
FlashTool_CloseComport
FlashTool_Connect
FlashTool_Connect_BROM
FlashTool_Connect_BROM_ByName
FlashTool_Connect_BROM_ByhCOM
FlashTool_Connect_BROM_Ex
FlashTool_Connect_ByName
FlashTool_Connect_ByhCOM
FlashTool_Connect_Download_DA
FlashTool_Connect_Download_InitDA
FlashTool_Connect_Download_LoopDA
FlashTool_Connect_Ex
FlashTool_CustPara_GetInfo
FlashTool_CustPara_Read
FlashTool_CustPara_Write
FlashTool_DecryptINI
FlashTool_DecryptImage_Config
FlashTool_Device_Control
FlashTool_DisableEMMCHWResetPin
FlashTool_Disconnect
FlashTool_Disconnect_BROM
FlashTool_Download
FlashTool_DownloadCert
FlashTool_EnableDAFinishCMD
FlashTool_EnableDRAM
FlashTool_EnableWatchDogTimeout
FlashTool_FirmwareUpdate
FlashTool_Format
FlashTool_Format_Partition
FlashTool_GetBootResult
FlashTool_GetDAReport
FlashTool_GetDLHandle
FlashTool_GetFATRanges
FlashTool_GetHRID
FlashTool_GetIMEI_PID_SWV_Info
FlashTool_GetLastErrorMessage
FlashTool_GetPLSecVersion
FlashTool_GetProjectId
FlashTool_GetRPMBStatus
FlashTool_GetRSCCnt
FlashTool_GetRSCInfo
FlashTool_GetReservedRomSize
FlashTool_GetSupportModem
FlashTool_IfLibDAMatch
FlashTool_IsConnectWithBootRom
FlashTool_IsToStop
FlashTool_LoadConfigFile
FlashTool_MemoryTest
FlashTool_NandUtil_Connect
FlashTool_OTP_CheckDevice
FlashTool_OTP_GetSize
FlashTool_OTP_Lock
FlashTool_OTP_LockCheckStatus
FlashTool_OTP_Read
FlashTool_OTP_Write
FlashTool_PL_Chanllenge
FlashTool_PostProcess
FlashTool_ReadEfuseAll
FlashTool_ReadEfuseAll_Ex
FlashTool_ReadFlashInfo
FlashTool_ReadFlashMemory
FlashTool_ReadPartitionCount
FlashTool_ReadPartitionInfo
FlashTool_Readback
FlashTool_RegComFunctions
FlashTool_Rehabilitate
FlashTool_RelayDA
FlashTool_RomGetCount
FlashTool_RomGetInfoAll
FlashTool_SecRO_GetInfo
FlashTool_SecRO_Read
FlashTool_SecRO_Write
FlashTool_SetDAReport
FlashTool_SetEMMCHWResetPin
FlashTool_SetOTPAddress
FlashTool_SetRSCInfo
FlashTool_SetUFSConfig
FlashTool_SetupUSBDL
FlashTool_SetupUSBDL_EX
FlashTool_Setup_API_Handle
FlashTool_UnRegComFunctions
FlashTool_UpdateConfig
FlashTool_WriteCustFlashInfo
FlashTool_WriteEfuseAll
FlashTool_WriteEfuseAll_Ex
FlashTool_WriteFlashMemory
FlashTool_WriteUSBDownloadControlBit
Flashtool_ServerVerificationFlow
GetAllInterfaceInfo
GetCOMPortWithFilter
GetCipherHeaderLen
GetCurrentCOMPortInfoWithFilter
GetCurrentCOMPortNumberWithFilter
GetIncrementCOMPortWithFilter
GetNandFlashNameByTypeId
GetNorFlashNameByTypeId
GetReadyToPowerOnWinAppMsgID
GetSpecialCOMPortWithFilter
HWChipSelectToString
HWMemoryIOToString
HWMemoryTestMethodToString
HWMemoryTypeToString
HWRamTypeToString
HWStorageTypeToString
IMGDEC_Create
IMGDEC_Destroy
IMGDEC_GetInfo
IMGDEC_IsReady
IMGDEC_Load
IMGDEC_SetCallback
IMGDEC_Unload
NandUtil_FlashFormat
NandUtil_FlashParameter
NandUtil_FlashReadback
NvRAMInfoReport
OTPOpToString
ParamOpToString
Preloader_BootMode
ProgramFlagToString
RB_Append
RB_Append_ReadToBuf
RB_ClearAll
RB_Create
RB_Delete
RB_Destroy
RB_EnableReadbackFAT
RB_GetAddrTypeFlag
RB_GetCount
RB_GetInfo
RB_GetInfoAll
RB_IsReady
RB_SetAddrTypeFlag
RB_SetEnableAttr
RB_SetFilepath
RB_SetNANDInfo
RB_SetPacketLength
RB_SetReadbackAddr
RB_SetReadbackFlag
RB_SetReadbackLength
RB_SetReadbackPartition
ReadFlagToString
SCERT_Create
SCERT_Destroy
SCERT_GetInfo
SCERT_IsReady
SCERT_Load
SCERT_LoadBuf
SCERT_SetCallback
SCERT_Unload
SetReadyToPowerOnWinAppMsgID
StatusToString
Test_WriteEfuse
USBSpeedStatusToString
UsbComPortEnumerate

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92a98f186ea7bd04f5c743460fd32988

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

flashtoollibex

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 195KB - Virtual size: 194KB

.data Size: 33KB - Virtual size: 43KB

.tls Size: 512B - Virtual size: 2B

.reloc Size: 64KB - Virtual size: 63KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 195KB - Virtual size: 194KB

.data
Size: 33KB - Virtual size: 43KB

.tls
Size: 512B - Virtual size: 2B

.reloc
Size: 64KB - Virtual size: 63KB