NEAS[.]e7b7854b85d4e7699ef2c4eb67e03aa0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e7b7854b85d4e7699ef2c4eb67e03aa0.exe
Size

1.2MB
MD5

e7b7854b85d4e7699ef2c4eb67e03aa0
SHA1

0330a164ae80d801c60b4b96ec2e7e100fc39bba
SHA256

6e704ac8523f4e9c7e8b8b66330b1a2e61fb8a2c9bba40357990811651f55827
SHA512

b67ff23f2c44d8b3a78a2d4ea051f261c9e74b4b1b8edb64b6b4393e105239e514e9eabf47427a7332a474fec03e62c4517771f56ddcdd7735be64f593a9634e
SSDEEP

24576:f/4/K6UHErIFA3aShqakM4MdgPYCAdaPIR7MMMMMMs:X4/K6QA3QMdg+04MMMMMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e7b7854b85d4e7699ef2c4eb67e03aa0.exe

Files

NEAS.e7b7854b85d4e7699ef2c4eb67e03aa0.exe
.exe windows:5 windows x64

dcc0bbeea72412044ed2dcdf34011989

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ord8
CreateStatusWindowW
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_Add
ImageList_AddMasked
PropertySheetW

shlwapi

StrCmpLogicalW
SHAutoComplete

uxtheme

IsAppThemed
IsThemeActive

kernel32

ReadFile
GetStdHandle
WriteFile
GetDriveTypeA
GetDiskFreeSpaceA
GetVolumeInformationA
GetFileAttributesA
SetFileAttributesA
SetFileAttributesW
MoveFileA
DeleteFileW
DeleteFileA
RemoveDirectoryW
RemoveDirectoryA
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
ExpandEnvironmentStringsW
FindNextFileA
FindFirstFileA
GetDiskFreeSpaceW
Sleep
GetVersionExW
CompareFileTime
FindCloseChangeNotification
FindFirstChangeNotificationW
GetLocaleInfoW
GetNumberFormatW
CreateThread
ExitThread
GetProcessAffinityMask
SetEvent
ResetEvent
SetThreadPriority
GetCurrentThread
WaitForMultipleObjects
CreateEventW
GetFullPathNameA
GetFullPathNameW
GetModuleFileNameA
CopyFileW
GetCompressedFileSizeW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetCurrentProcessId
UpdateResourceW
EnumResourceLanguagesW
EndUpdateResourceW
EnumResourceNamesW
BeginUpdateResourceW
CompareStringA
SetPriorityClass
SetCurrentDirectoryA
GetCurrentDirectoryA
WideCharToMultiByte
CompareStringW
IsDBCSLeadByte
GetCPInfo
GlobalMemoryStatus
GetVolumeInformationW
CreateFileA
SetCurrentDirectoryW
ResumeThread
SuspendThread
GetSystemTimeAsFileTime
GetCurrentThreadId
GetDateFormatA
GetTimeFormatA
GetLocalTime
GetThreadPriority
GetPriorityClass
SetErrorMode
MulDiv
FindNextChangeNotification
HeapFree
HeapAlloc
GetProcessHeap
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapSize
DeleteCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
HeapCreate
HeapSetInformation
ExitProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
SetStdHandle
RtlPcToFileHeader
RaiseException
RtlUnwindEx
RtlLookupFunctionEntry
HeapReAlloc
GetFileType
GetFileTime
SetEndOfFile
SetFilePointer
FlushFileBuffers
SetFileTime
BackupSeek
BackupRead
CreateFileW
GetCurrentProcess
FormatMessageW
LocalFree
GetCurrentDirectoryW
MoveFileW
CreateMutexW
ReleaseMutex
GetLastError
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
WriteConsoleW
GetVersionExA
GetTickCount
GetSystemTime
SystemTimeToFileTime
CreateFileMappingW
WaitForSingleObject
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetTempPathW
GetCommandLineW
GetModuleFileNameW
FindNextFileW
LoadLibraryW
LocalFileTimeToFileTime
FreeLibrary
GetTempPathA
ExpandEnvironmentStringsA
GetDriveTypeW
FileTimeToDosDateTime
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
FindClose
DosDateTimeToFileTime
GetFileAttributesW
GetModuleHandleW
GetProcAddress
SetLastError
GetLocaleInfoA
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
GetLogicalDrives

user32

LoadIconW
PtInRect
ScrollWindowEx
SetScrollPos
CreateDialogParamW
PostThreadMessageW
IsChild
GetLastActivePopup
GetMenuItemID
GetClipboardData
SetMenu
InsertMenuW
LoadMenuW
PostQuitMessage
RegisterClassW
LoadAcceleratorsW
GetMenuState
GetMessageW
CopyRect
ValidateRect
GetSysColor
CopyImage
FillRect
ExitWindowsEx
CharUpperA
CharLowerA
DrawIconEx
LoadStringW
GetWindow
SetMenuItemInfoW
GetWindowLongW
SetWindowLongW
GetSystemMenu
KillTimer
SetTimer
SystemParametersInfoW
RedrawWindow
GetComboBoxInfo
SetScrollRange
IsCharAlphaW
CharLowerW
OpenClipboard
TranslateMessage
SetClipboardData
CharToOemA
CloseClipboard
MessageBeep
PeekMessageW
CharUpperW
GetFocus
EnableMenuItem
MoveWindow
CheckMenuItem
LoadBitmapW
InsertMenuItemW
LoadImageW
EndPaint
IsWindow
SetWindowTextW
GetClientRect
UpdateWindow
GetWindowTextLengthW
AppendMenuW
DrawMenuBar
GetMenu
GetSubMenu
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
CharToOemBuffW
ScreenToClient
ClientToScreen
CreatePopupMenu
SetWindowLongPtrW
TrackPopupMenu
DestroyMenu
CallWindowProcW
RegisterClipboardFormatW
GetKeyState
CreateDialogIndirectParamW
BringWindowToTop
SetWindowPlacement
GetPropW
RemovePropW
GetIconInfo
CreateIconIndirect
TranslateAcceleratorW
IsDialogMessageW
SetPropW
FindWindowW
GetForegroundWindow
RegisterWindowMessageW
FindWindowExW
EnumWindows
CreateIcon
SetForegroundWindow
GetDlgItemTextA
SetDlgItemTextA
FlashWindow
IsCharUpperW
RegisterClassExW
SendMessageW
SetFocus
GetWindowTextW
DefWindowProcW
CreateWindowExW
DestroyWindow
SetDlgItemTextW
EndDialog
EmptyClipboard
DispatchMessageW
LoadCursorW
SetCursor
WindowFromPoint
GetWindowThreadProcessId
GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
GetWindowLongPtrW
ShowWindow
EnableWindow
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
IsWindowEnabled
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
PostMessageW
EnumChildWindows
GetClassNameW
GetWindowRect
MapWindowPoints
SetWindowPos
InvalidateRect
GetParent
CheckDlgButton
MessageBoxW
IsWindowVisible
OemToCharBuffA
CharToOemBuffA
DialogBoxParamW
DestroyIcon
GetDlgItem
SendDlgItemMessageW
OemToCharA
GetDlgItemTextW
BeginPaint

gdi32

LineTo
MoveToEx
Rectangle
GetTextExtentPoint32W
CreatePatternBrush
TextOutA
SetMapMode
DPtoLP
CreateBitmap
SetPixel
GetMapMode
CreateCompatibleBitmap
StretchBlt
SetBkColor
ExtTextOutW
BitBlt
GetObjectW
CreateCompatibleDC
GetPixel
DeleteDC
CreatePen
CreateSolidBrush
SetTextColor
TextOutW
Polygon
Polyline
SelectObject
GetTextFaceW
GetTextMetricsW
CreateFontW
GetDeviceCaps
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
GetSecurityDescriptorLength
GetFileSecurityA
GetFileSecurityW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
IsTextUnicode
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges

shell32

ord100
SHGetPathFromIDListW
FindExecutableW
DragFinish
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconW
ShellExecuteW
SHGetPathFromIDListA
SHGetFileInfoW
SHAddToRecentDocs
SHFileOperationW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHChangeNotify
SHGetDesktopFolder
SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
CoTaskMemAlloc
CLSIDFromString
OleSetClipboard
DoDragDrop
CoInitializeEx

oleaut32

VariantInit

Sections

.text
Size: 821KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcc0bbeea72412044ed2dcdf34011989

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 821KB - Virtual size: 821KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 17KB - Virtual size: 479KB

.pdata Size: 33KB - Virtual size: 32KB

.rsrc Size: 206KB - Virtual size: 205KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 821KB - Virtual size: 821KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 17KB - Virtual size: 479KB

.pdata
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 206KB - Virtual size: 205KB

.reloc
Size: 6KB - Virtual size: 5KB