NEAS[.]a0578a641a8b31dc22741093d6d44670[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a0578a641a8b31dc22741093d6d44670.exe
Size

2.3MB
MD5

a0578a641a8b31dc22741093d6d44670
SHA1

e4b5f92d2c07927d2885a2a79f36d309ddb1cce9
SHA256

14aeef814fa433ec3fd89d7c69b11a9de8c44e9e98fb4cfe0cb5637f33292855
SHA512

5d4ab72f31c7a3ccdfe57987ea4dc914caddd733afb0d005c08619609e8d2dbe6686691cf226d3ac84a1ac688ebfdad3f8b44c70db0f55bb5b945a028fb93d69
SSDEEP

49152:QRPHb8yB80f1xAxAJx2Nbk8DR+/MGlTHCA/U4SPIOhcNgqL6q/+4kERUk/0r:QRP4yB80f1xAxAJs68DR+/LrCj4SPIwB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0578a641a8b31dc22741093d6d44670.exe

Files

NEAS.a0578a641a8b31dc22741093d6d44670.exe
.exe windows:5 windows x86

e2b9e5f6f0c7da71827b7e6b549e2f88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

sqlite3

sqlite3_exec
sqlite3_column_bytes
sqlite3_step
sqlite3_finalize
sqlite3_close
sqlite3_column_blob
sqlite3_column_count
sqlite3_prepare
sqlite3_key
sqlite3_open

lziy

?UnHookApp@@YGHXZ
?HookApp@@YGHPAUHWND__@@@Z
?SetOffsetString@@YGXPAD@Z

kernel32

GetStartupInfoW
HeapReAlloc
RtlUnwind
RaiseException
SetStdHandle
GetSystemInfo
ExitThread
ExitProcess
HeapQueryInformation
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
LCMapStringW
HeapCreate
GetStdHandle
GetTimeZoneInformation
GetStringTypeW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
VirtualAlloc
HeapAlloc
HeapFree
DecodePointer
EncodePointer
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
GetTempFileNameA
GetNumberFormatA
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
InitializeCriticalSectionAndSpinCount
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
lstrcmpA
HeapSetInformation
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
WaitForSingleObject
ResumeThread
SetThreadPriority
InterlockedIncrement
GetCommandLineA
GetSystemTimeAsFileTime
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
lstrcmpiA
GetThreadLocale
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
CompareStringA
LoadLibraryW
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
ActivateActCtx
DeactivateActCtx
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
MulDiv
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
CreateThread
lstrlenW
CreateDirectoryA
GetProcAddress
Sleep
GetLocalTime
FindResourceA
GetACP
FormatMessageA
GetCurrentDirectoryA
lstrcpyA
WinExec
LoadLibraryA
lstrcatA
GetWindowsDirectoryA
FreeLibrary
CloseHandle
GetVersionExA
DeviceIoControl
CreateFileA
GetModuleFileNameA
GetVolumeInformationA
EnterCriticalSection
CopyFileA
GetLastError
InterlockedExchange
MultiByteToWideChar
LeaveCriticalSection
lstrlenA
LockResource
SizeofResource
WideCharToMultiByte
GetTickCount
LoadResource
FindResourceW
GetModuleHandleW
VirtualQuery
GetFileType

user32

GetWindowRgn
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
SetClassLongA
DestroyAcceleratorTable
SetParent
PostThreadMessageA
DrawIconEx
CopyImage
HideCaret
InvertRect
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
NotifyWinEvent
RedrawWindow
SetWindowRgn
LoadMenuW
DeleteMenu
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
RegisterClipboardFormatA
UnregisterClassA
RealChildWindowFromPoint
GetSysColorBrush
SystemParametersInfoA
GetMenuItemInfoA
KillTimer
WaitMessage
SetWindowContextHelpId
MapDialogRect
GetNextDlgGroupItem
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
CreateDialogIndirectParamA
EndDialog
CharNextA
GetDesktopWindow
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
GetWindow
UnhookWindowsHookEx
IntersectRect
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
GetLastActivePopup
GetCursorPos
SetWindowPos
ScreenToClient
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
GetSystemMenu
SetTimer
IsIconic
SetForegroundWindow
DrawIcon
LoadIconW
TranslateAcceleratorA
LoadAcceleratorsA
AppendMenuA
GetSystemMetrics
GetDlgItem
PostQuitMessage
SetCapture
MessageBeep
SubtractRect
GetDoubleClickTime
OpenClipboard
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
MapVirtualKeyExA
IsCharLowerA
CharUpperBuffA
UnpackDDElParam
PtInRect
CopyIcon
IsWindow
ReleaseCapture
FindWindowA
LoadCursorA
LoadBitmapW
GetKeyState
GetAsyncKeyState
MessageBoxA
GetWindowDC
GetNextDlgTabItem
ReuseDDElParam
InsertMenuItemA
LoadImageW
EmptyClipboard
CloseClipboard
SetFocus
SetClipboardData
ClientToScreen
SetCursor
GetWindowRect
FillRect
GetSubMenu
GetParent
LoadMenuA
WindowFromPoint
GetClientRect
CreateIconIndirect
GetIconInfo
GetDC
DrawFocusRect
InflateRect
DrawStateA
OffsetRect
TrackPopupMenuEx
InvalidateRect
GetWindowLongA
ReleaseDC
DestroyCursor
GetSysColor
FrameRect
GetActiveWindow
PostMessageA
LoadImageA
EnableWindow
DestroyMenu
DestroyIcon
CopyRect
SendMessageA
CallNextHookEx
GetUpdateRect

gdi32

ExtSelectClipRgn
SelectPalette
GetObjectType
CreatePen
SetWindowExtEx
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetRgnBox
GetBkColor
GetTextColor
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
SetPolyFillMode
Ellipse
Polygon
OffsetRgn
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceA
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
CreateEllipticRgn
SetROP2
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
CreateSolidBrush
CreatePatternBrush
CreateDIBSection
StretchBlt
SetDIBColorTable
GetDIBColorTable
BitBlt
SetTextColor
DeleteDC
SetBkColor
SetPixel
CreateBitmap
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
GetObjectA
Polyline
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
ScaleWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA

shell32

ShellExecuteA
SHGetPathFromIDListA
SHGetFolderLocation
SHBrowseForFolderA
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHAppBarMessage
ShellExecuteExA
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
UrlUnescapeA

ole32

IsAccelerator
OleLockRunning
OleGetClipboard
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoLockObjectExternal
RevokeDragDrop
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoInitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
RegisterDragDrop

oleaut32

VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocString
SafeArrayAccessData
SafeArrayDestroy
SafeArrayCreate
SysFreeString
VariantInit
SysAllocStringByteLen
SysStringLen

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipGetImageWidth
GdipCloneImage
GdipBitmapLockBits
GdiplusShutdown
GdipFree
GdipGetImageHeight
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipDrawImageI
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromFile
GdipGetImagePaletteSize

ws2_32

WSAStartup
WSACleanup
WSASetLastError

netapi32

Netbios

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetQueryDataAvailable
HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

waveOutPrepareHeader
waveOutOpen
waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutClose
mmioOpenA
mmioWrite
mmioCreateChunk
mmioClose
mmioAscend
PlaySoundA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 345KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2b9e5f6f0c7da71827b7e6b549e2f88

Headers

DLL Characteristics

File Characteristics

Imports

sqlite3

lziy

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

ws2_32

netapi32

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 345KB - Virtual size: 345KB

.data Size: 27KB - Virtual size: 91KB

.rsrc Size: 459KB - Virtual size: 458KB

.reloc Size: 184KB - Virtual size: 184KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 345KB - Virtual size: 345KB

.data
Size: 27KB - Virtual size: 91KB

.rsrc
Size: 459KB - Virtual size: 458KB

.reloc
Size: 184KB - Virtual size: 184KB