Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b45aec558479a887dcd8030a4a07ee60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b45aec558479a887dcd8030a4a07ee60.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b45aec558479a887dcd8030a4a07ee60.exe
-
Size
226KB
-
MD5
b45aec558479a887dcd8030a4a07ee60
-
SHA1
33f3f71efb51720c2d31d1ffe118bd793c00ddba
-
SHA256
542b4fa4c6ab920870f1b24f525f19d0036eacaff7c7b04f035c335adb72475a
-
SHA512
3f61e7d84007922297096a1d69d5ca40d456e550cd9489c59ecee9ff4350cffc53046453097eed841bfdd3fb64917fd256c8279d01ab6b067d13a7ee46fe5506
-
SSDEEP
3072:DKOSeH4a+3p2OjTCvUA6+/rd5tieOXEggggrm5Sdph:DKOSe7W4OjTa9rDweOXl5Ap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b45aec558479a887dcd8030a4a07ee60.exe
Files
-
NEAS.b45aec558479a887dcd8030a4a07ee60.exe.exe windows:5 windows x86
e611f764c423f81212176cd924c3d383
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersionExA
CreateFileA
ResetEvent
GetFileSizeEx
CreateEventA
GetDriveTypeA
FormatMessageA
ExitProcess
SetEvent
CopyFileA
GetPrivateProfileIntA
GetWindowsDirectoryA
CreateThread
LoadLibraryA
FreeLibrary
DeleteFileA
CloseHandle
WinExec
ReleaseMutex
CreateToolhelp32Snapshot
EncodePointer
CreateMutexA
FindNextFileA
GetModuleFileNameA
LockResource
Process32Next
GetLocalTime
GetPrivateProfileStringA
FindClose
GetProcAddress
GetCurrentThreadId
FindFirstFileA
SetUnhandledExceptionFilter
MultiByteToWideChar
GetSystemDirectoryA
ReadFile
TerminateProcess
CreateProcessA
GetFileAttributesA
SizeofResource
Sleep
WideCharToMultiByte
OpenProcess
WriteFile
WaitForSingleObject
Process32First
GetCurrentProcess
LoadResource
FindResourceW
FindResourceExW
lstrcmpA
GetFileSize
CreateFileMappingA
GetVersion
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
LocalFree
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetTickCount
QueryPerformanceCounter
GetLastError
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
SetCurrentDirectoryA
DecodePointer
IsProcessorFeaturePresent
user32
MonitorFromWindow
GetMonitorInfoA
ShowWindow
GetLastActivePopup
SetForegroundWindow
PostMessageA
IsWindowVisible
DestroyWindow
GetWindowLongA
SetWindowLongA
GetClientRect
IsZoomed
IsIconic
PostQuitMessage
GetWindowRect
IsWindow
GetSystemMetrics
ExitWindowsEx
ScreenToClient
GetDC
SetWindowPos
LoadStringA
SetWindowRgn
gdi32
DeleteObject
CreateRoundRectRgn
GetTextExtentPoint32A
advapi32
RegCloseKey
OpenServiceA
RegFlushKey
RegDeleteValueA
RegDeleteValueW
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorA
AdjustTokenPrivileges
ControlService
OpenSCManagerA
QueryServiceStatus
RegOpenKeyExA
LookupPrivilegeValueA
EnumServicesStatusA
OpenProcessToken
CloseServiceHandle
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
shlwapi
PathAppendA
PathRemoveFileSpecA
msvcp100
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
duilib
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ
?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z
?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ
?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMinWidth@CControlUI@DuiLib@@UBEHXZ
?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ
?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMinHeight@CControlUI@DuiLib@@UBEHXZ
?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ
?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z
?SetRelativePos@CControlUI@DuiLib@@UAEXUtagSIZE@@0@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagTRelativePosUI@2@XZ
?IsRelativePos@CControlUI@DuiLib@@UBE_NXZ
?GetToolTip@CControlUI@DuiLib@@UBE?AVCStdString@2@XZ
?SetToolTip@CControlUI@DuiLib@@UAEXPBD@Z
?GetShortcut@CControlUI@DuiLib@@UBEDXZ
?SetShortcut@CControlUI@DuiLib@@UAEXD@Z
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?GetUserData@CControlUI@DuiLib@@UAEABVCStdString@2@XZ
?SetUserData@CControlUI@DuiLib@@UAEXPBD@Z
?GetTag@CControlUI@DuiLib@@UBEIXZ
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?Init@CControlUI@DuiLib@@UAEXXZ
?GetY@CControlUI@DuiLib@@UBEHXZ
?DoInit@CControlUI@DuiLib@@UAEXXZ
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?EstimateSize@CControlUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintText@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
??0CContainerUI@DuiLib@@QAE@XZ
??1CContainerUI@DuiLib@@UAE@XZ
?GetClass@CContainerUI@DuiLib@@UBEPBDXZ
?GetInterface@CContainerUI@DuiLib@@UAEPAXPBD@Z
?GetItemAt@CContainerUI@DuiLib@@UBEPAVCControlUI@2@H@Z
?GetItemIndex@CContainerUI@DuiLib@@UBEHPAVCControlUI@2@@Z
?SetItemIndex@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z
?GetCount@CContainerUI@DuiLib@@UBEHXZ
?Add@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@@Z
?AddAt@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z
?Remove@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@@Z
?RemoveAt@CContainerUI@DuiLib@@UAE_NH@Z
?RemoveAll@CContainerUI@DuiLib@@UAEXXZ
?DoEvent@CContainerUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?SetVisible@CContainerUI@DuiLib@@UAEX_N@Z
?SetInternVisible@CContainerUI@DuiLib@@UAEX_N@Z
?SetMouseEnabled@CContainerUI@DuiLib@@UAEX_N@Z
?GetInset@CContainerUI@DuiLib@@UBE?AUtagRECT@@XZ
?SetInset@CContainerUI@DuiLib@@UAEXUtagRECT@@@Z
?GetChildPadding@CContainerUI@DuiLib@@UBEHXZ
?SetChildPadding@CContainerUI@DuiLib@@UAEXH@Z
?GetX@CControlUI@DuiLib@@UBEHXZ
?GetHeight@CControlUI@DuiLib@@UBEHXZ
?GetWidth@CControlUI@DuiLib@@UBEHXZ
?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ
?SetText@CControlUI@DuiLib@@UAEXPBD@Z
?GetText@CControlUI@DuiLib@@UBE?AVCStdString@2@XZ
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?Activate@CControlUI@DuiLib@@UAE_NXZ
?GetControlFlags@CControlUI@DuiLib@@UBEIXZ
?SetName@CControlUI@DuiLib@@UAEXPBD@Z
?GetName@CControlUI@DuiLib@@UBE?AVCStdString@2@XZ
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?GetRoot@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@XZ
?RemoveMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z
?RemovePreMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z
?AddPreMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z
?ReapObjects@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z
?Invalidate@CControlUI@DuiLib@@QAEXXZ
?SetBkImage@CControlUI@DuiLib@@QAEXPBD@Z
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?SetMaxValue@CProgressUI@DuiLib@@QAEXH@Z
?IsAutoDestroy@CContainerUI@DuiLib@@UBE_NXZ
?SetAutoDestroy@CContainerUI@DuiLib@@UAEX_N@Z
?IsDelayedDestroy@CContainerUI@DuiLib@@UBE_NXZ
?SetDelayedDestroy@CContainerUI@DuiLib@@UAEX_N@Z
?IsMouseChildEnabled@CContainerUI@DuiLib@@UBE_NXZ
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?SetMouseChildEnabled@CContainerUI@DuiLib@@UAEX_N@Z
?FindSelectable@CContainerUI@DuiLib@@UBEHH_N@Z
?SetPos@CContainerUI@DuiLib@@UAEXUtagRECT@@@Z
?DoPaint@CContainerUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetAttribute@CContainerUI@DuiLib@@UAEXPBD0@Z
?SetManager@CContainerUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z
?FindControl@CContainerUI@DuiLib@@UAEPAVCControlUI@2@P6GPAV32@PAV32@PAX@Z1I@Z
?GetScrollPos@CContainerUI@DuiLib@@UBE?AUtagSIZE@@XZ
?GetScrollRange@CContainerUI@DuiLib@@UBE?AUtagSIZE@@XZ
?SetScrollPos@CContainerUI@DuiLib@@UAEXUtagSIZE@@@Z
?LineUp@CContainerUI@DuiLib@@UAEXXZ
?LineDown@CContainerUI@DuiLib@@UAEXXZ
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPBDXZ
?PostMessageA@CWindowWnd@DuiLib@@QAEJIIJ@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PBDKKHHHHPAUHMENU__@@@Z
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??0CWindowWnd@DuiLib@@QAE@XZ
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PBD@Z
?RemoveNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPBD_N@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPBD@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCStdString@2@XZ
?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@@Z
??1CPaintManagerUI@DuiLib@@QAE@XZ
??0CPaintManagerUI@DuiLib@@QAE@XZ
??MCStdString@DuiLib@@QBE_NPBD@Z
??BCStdString@DuiLib@@QBEPBDXZ
??1CStdString@DuiLib@@QAE@XZ
??0CStdString@DuiLib@@QAE@ABV01@@Z
??0CStdString@DuiLib@@QAE@PBDH@Z
?SelectItem@CTabLayoutUI@DuiLib@@QAE_NH@Z
?Offset@CRect@DuiLib@@QAEXHH@Z
??0CRect@DuiLib@@QAE@XZ
??0CRect@DuiLib@@QAE@ABUtagRECT@@@Z
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PBDPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
??0CDialogBuilder@DuiLib@@QAE@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
?AddMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?ProcessScrollBar@CContainerUI@DuiLib@@MAEXUtagRECT@@HH@Z
?SetFloatPos@CContainerUI@DuiLib@@MAEXH@Z
?GetHorizontalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ
?GetVerticalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ
?EnableScrollBar@CContainerUI@DuiLib@@UAEX_N0@Z
?EndRight@CContainerUI@DuiLib@@UAEXXZ
?HomeLeft@CContainerUI@DuiLib@@UAEXXZ
?PageRight@CContainerUI@DuiLib@@UAEXXZ
?PageLeft@CContainerUI@DuiLib@@UAEXXZ
?LineRight@CContainerUI@DuiLib@@UAEXXZ
?LineLeft@CContainerUI@DuiLib@@UAEXXZ
?EndDown@CContainerUI@DuiLib@@UAEXXZ
?HomeUp@CContainerUI@DuiLib@@UAEXXZ
?PageDown@CContainerUI@DuiLib@@UAEXXZ
?PageUp@CContainerUI@DuiLib@@UAEXXZ
keychk
?YGKCGenerateMachineIDEx@@YAKPAK@Z
zlib
uncompress
bigfile
EagleFilesMaxSize
CreateEagleFilesEx
EagleRecommendFilesSize
EagleFilesMinSize
remoteservice
ord22
eagleins
?SetEaglePartition@@YAJKPAU_EAGLE_PARTITION@@@Z
?BeginSetup@@YAJXZ
?GetEagleDriverState@@YAJPAH@Z
?EndSetup@@YAJXZ
?SetUniverse@@YAJGPAU_EAGLE_VPC@@@Z
?SetEagleInfo@@YAJPAU_EAGLE_INFO@@@Z
?GetCurrentEaglePartition@@YAJPAXPAU_EAGLE_PARTITION@@@Z
?GetEagleSysDisk@@YAPAXXZ
?GetTimePointUniverse@@YAJGPAU_GENERATION@@G@Z
?GetLastTimePoint@@YAJPAXPAG@Z
?GetUniverse@@YAJGPAU_EAGLE_VPC@@@Z
?GetEagleInfo@@YAJPAU_EAGLE_INFO@@@Z
?SetTimePointRestoreProperty@@YAJPAXGGPAG@Z
?GetCurrentUniverse@@YAJPAG@Z
?GetCurTimePoint@@YAJPAG@Z
?SetTimePointUniverse@@YAJPAD0PAU_EAGLE_DATE_TIME@@PAGGP6AJ0KH@Z@Z
?CreateUniverse@@YAJPAD0GPAU_EAGLE_DATE_TIME@@PAGP6AJ0KH@Z@Z
?SetClearOriginalBackupTimePoint@@YAJPAXGH@Z
?ConfigEagleEx2@@YAJHHKPAD0HP6AJ0KH@Z@Z
?SetScanFileInfo@@YAJPAU_SCAN_FILE_INFO@@@Z
?IsAsymatricVM@@YAHXZ
?SetTimePoint@@YAJPAD0PAU_EAGLE_DATE_TIME@@PAGP6AJ0KH@Z@Z
?CloneEaglePartition@@YAJP6AJPADKH@Z@Z
?SetAnchorTimePoint@@YAJPAXG@Z
SetUseNative
ord1
?SetMaintenanceUniverseId@@YAJG@Z
ygdntool
ord2
ord3
environmentcheckdll
IsMulti_OS
MemoryCheck
IsMulti_HD
ConflictedSoftwareCheck
SpaceCheck
OSVersion
devportflt
InstallPortFlt
IsDevPortFltEnable
msvcr100
_invoke_watson
_except_handler4_common
_controlfp_s
__CxxFrameHandler3
_CxxThrowException
memcpy
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
strcpy_s
memset
_time64
??3@YAXPAX@Z
_mbslwr_s
memmove_s
_mbsicmp
sprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
free
malloc
_localtime64_s
_access
_mbsstr
atoi
strnlen
vsprintf_s
_mbschr
_mbsrchr
strncpy
??_V@YAXPAX@Z
memcpy_s
_mbsinc
strrchr
_vscprintf
_mbscmp
??2@YAPAXI@Z
_purecall
strcat_s
fputs
fgets
fopen
fprintf
strftime
vfprintf
_localtime64
fclose
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ