NEAS[.]9cb3a444e55bf3f97b1bd3a9213f9920[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9cb3a444e55bf3f97b1bd3a9213f9920.exe
Size

509KB
MD5

9cb3a444e55bf3f97b1bd3a9213f9920
SHA1

e6f06bab9d53d81600f6a5450fb8fe3220fae3bf
SHA256

b3aafd7e7266b04af70fc589ac0114469f203e306c4170ddb6d75fc0b4b6b117
SHA512

42c3f9c7476d0de9ec6f9cdd77051cd18f370d0c63b30e52cd89ff54fc852713c4544e5dae301edddae4d2118c1180791a3a6699d10009f4d09dbb48113cf1f6
SSDEEP

6144:COzGTES96dCXU/vWsxVvYdIhXhbrOm1MVYhjnstres/BgHxefy/Cl5U1QrRf:/GTECuTLkIounstr8HxeRDU2tf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9cb3a444e55bf3f97b1bd3a9213f9920.exe

Files

NEAS.9cb3a444e55bf3f97b1bd3a9213f9920.exe
.dll windows:6 windows x86

067bde474463e7209b075512651015c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
HeapDestroy
CloseHandle
ResumeThread
GetDateFormatW
FreeLibrary
ClearCommBreak
GetDiskFreeSpaceW
CreateEventW
IsDebuggerPresent
DeleteFileA
CreateFileW
ReadConsoleW
WriteConsoleW
OutputDebugStringW
SetStdHandle
LoadLibraryExW
HeapReAlloc
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
WriteFile
GetOEMCP
QueryPerformanceCounter
IsValidCodePage
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
GetStdHandle
GetProcessHeap
HeapSize
AreFileApisANSI
ExitProcess
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetModuleHandleW
TlsFree
TlsSetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
TlsGetValue
ResetEvent
SetLastError
FormatMessageW
GetCommandLineA
CompareFileTime
SetEndOfFile
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
LoadResource
MapViewOfFile
DeleteCriticalSection
FindFirstFileA
SetCommBreak
GetModuleHandleExW
WaitNamedPipeA
GetExitCodeThread
RaiseException
GetStartupInfoW
OpenProcess
GetTickCount
GetEnvironmentStringsW
GetCommandLineW
FileTimeToLocalFileTime
GetFileType
GetLocalTime
FindClose
FlushFileBuffers
GlobalUnlock
SetCommTimeouts
GetUserDefaultLCID
SystemTimeToFileTime
SetErrorMode
GetACP
IsProcessorFeaturePresent
HeapAlloc
GetCPInfo
RtlUnwind
GetCurrentThreadId
HeapFree
GetLastError
GetStringTypeW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
DecodePointer

user32

CreateMenu
UnionRect
EndPaint
MessageBeep
GetClientRect
OffsetRect
GetScrollInfo
GetWindowLongW
SetWindowsHookExA
IsWindow
DestroyMenu
GetDlgItem
GetSysColor
MessageBoxW
ToAsciiEx
MessageBoxA
SendDlgItemMessageA
DeleteMenu
CreateDialogParamA
SetRect
CheckMenuRadioItem
DestroyCaret
GetSystemMetrics
SendMessageW
DestroyIcon
LoadStringA
SetDlgItemTextA
IsRectEmpty
SetWindowRgn
CheckRadioButton
SetParent
GetWindowPlacement
PeekMessageA
MonitorFromWindow
SetWindowLongW
RedrawWindow
DestroyCursor
EnumChildWindows
DrawMenuBar
MapWindowPoints
GetCaretBlinkTime
GetMessageTime

gdi32

PolyPolygon
TranslateCharsetInfo
GetStockObject
ExtTextOutA
CreateSolidBrush
SetTextColor
CreateBrushIndirect
Polyline
SetViewportExtEx
GetBitmapBits
CreatePenIndirect
GetCurrentPositionEx
GetWindowOrgEx
PatBlt
SetWindowExtEx
GetCharacterPlacementW
CreateHatchBrush
StretchBlt
PtInRegion
Ellipse
GetTextExtentExPointA
CreateDIBitmap
CreateEnhMetaFileW
SelectObject
CombineRgn
GetCharABCWidthsW
SetWinMetaFileBits
CreateBitmapIndirect

advapi32

GetUserNameA
OpenSCManagerW
QueryServiceStatus
RegEnumKeyExW
ControlService
RegDeleteKeyA

shell32

CommandLineToArgvW
Shell_NotifyIconW

ole32

CoTaskMemFree

oleaut32

SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayPtrOfIndex
SysReAllocStringLen

Sections

.text
Size: 390KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 619KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

067bde474463e7209b075512651015c8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 390KB - Virtual size: 390KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 20KB - Virtual size: 619KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 390KB - Virtual size: 390KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 20KB - Virtual size: 619KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 15KB - Virtual size: 14KB