NEAS[.]c1775a91deca477e52b40e5a50c8bf80[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.c1775a91deca477e52b40e5a50c8bf80.exe
Size

3.3MB
MD5

c1775a91deca477e52b40e5a50c8bf80
SHA1

dbe6726b8b6dca457a41d7b063c0e6cd5cdd166d
SHA256

9de85daa34112182335c4ece80fdf538b682f7bd948b7c11381464c7d83fe513
SHA512

ddd2c88ac8a0aab010336c828733a3f1233f687d5d6afb3e2c58d4a1e34a3af2b32e28af5264f7860a3db7db324dd18e6a6f1f44404756504d0ee6ab5929c1b1
SSDEEP

24576:Tlpr5w0SbWj3u27L/nPQsf0gX2ngGBAs++A42494k4RRk4k44Vk9Kk4k44+k9f4C:e0SbyZ7L/nLcX++u/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c1775a91deca477e52b40e5a50c8bf80.exe

Files

NEAS.c1775a91deca477e52b40e5a50c8bf80.exe
.dll regsvr32 windows:5 windows x86

9c466129b2e4964074975c3eb8b64ca1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetStdHandle
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
HeapCreate
HeapDestroy
VirtualFree
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
GetFileType
SetStdHandle
SizeofResource
HeapReAlloc
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileAttributesA
FindResourceExW
GetVersion
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
GetFileTime
GetFileSizeEx
CreateFileW
FileTimeToLocalFileTime
GlobalFlags
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
IsDBCSLeadByte
GetUserDefaultLCID
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetProfileIntW
lstrlenA
lstrcmpA
FileTimeToSystemTime
InterlockedDecrement
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
CopyFileW
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
GlobalFree
FreeResource
GetFileAttributesW
CreateDirectoryA
WritePrivateProfileStringA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
MulDiv
GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc
lstrlenW
GetVersionExW
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
LCMapStringW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThreadId
GetLocalTime
Sleep
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
SetLastError
CloseHandle
CreateThread
CreateEventW
WaitForSingleObject
SetEvent
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource

user32

GetTopWindow
GetMessageTime
PeekMessageW
MapWindowPoints
SetMenu
GetScrollRange
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
CallWindowProcW
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
DispatchMessageW
GetWindowThreadProcessId
GetLastActivePopup
GetWindowDC
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
WindowFromPoint
IsWindowVisible
IsRectEmpty
EnableWindow
SetWindowRgn
SetWindowLongW
SendMessageW
GetClientRect
GetDoubleClickTime
GetForegroundWindow
MessageBoxW
EndPaint
CheckRadioButton
UpdateWindow
RedrawWindow
LoadImageW
GrayStringW
DrawTextExW
TabbedTextOutW
ReleaseCapture
GetCapture
ClipCursor
SetCapture
GetWindowTextW
GetWindowTextLengthW
SetFocus
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
InvertRect
PtInRect
GetFocus
GetMessagePos
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
RemoveMenu
LoadBitmapW
PostMessageW
KillTimer
SetTimer
TranslateMessage
CopyRect
OffsetRect
InvalidateRect
CallNextHookEx
UnhookWindowsHookEx
GetSystemMetrics
SetWindowsHookExW
GetWindowRect
GetParent
GetDesktopWindow
GetDC
DrawTextW
ReleaseDC
SetWindowPos
SetParent
GetWindowLongW
IsWindow
LoadIconW
SetClassLongW
wsprintfW
FrameRect
CreatePopupMenu
AppendMenuW
ClientToScreen
TrackPopupMenu
ScreenToClient
MoveWindow
FillRect
GetCursorPos
RegisterHotKey
UnregisterHotKey
SystemParametersInfoW
GetSysColor
DrawEdge
InflateRect
SetCursor
LoadCursorW
SetRect
GetClassInfoW
DefWindowProcW
IntersectRect
GetKeyState
IsClipboardFormatAvailable
IsDialogMessageW
SetWindowTextW
ShowWindow
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
RegisterClipboardFormatW
PostQuitMessage
ValidateRect
GetMessageW
SetRectEmpty
CreateMenu
EnumChildWindows
LockWindowUpdate
UnregisterClassW
GetDialogBaseUnits
GetSysColorBrush
PostThreadMessageW
CharUpperW
DestroyIcon
GetTabbedTextExtentA
BeginPaint
GetDCEx

gdi32

CreatePatternBrush
CreateBitmap
CopyMetaFileW
CreateDCW
GetCurrentPositionEx
SetRectRgn
LPtoDP
CreateMetaFileW
SetWindowExtEx
DeleteMetaFile
GetTextAlign
EnumFontFamiliesExW
Rectangle
UnrealizeObject
CreateRectRgnIndirect
ScaleWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
MoveToEx
OffsetWindowOrgEx
SetWindowOrgEx
CloseMetaFile
ScaleViewportExtEx
SetROP2
SetBkColor
RestoreDC
SaveDC
PatBlt
GetTextMetricsW
SetTextColor
SetBkMode
SelectClipRgn
DeleteDC
Escape
ExtTextOutW
RectVisible
PtVisible
CreatePen
BitBlt
GetBkColor
CreateCompatibleBitmap
GetDeviceCaps
GetCurrentObject
GetTextExtentPoint32W
CreateFontIndirectW
StretchDIBits
SetStretchBltMode
PathToRegion
EndPath
BeginPath
TextOutW
SelectObject
CreateFontW
StretchBlt
GetObjectW
CreateCompatibleDC
DeleteObject
CreateRoundRectRgn
GetStockObject
LineTo
ExcludeClipRect
GetClipBox
SetMapMode
CreateRectRgn
CreateSolidBrush
CombineRgn

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyExW
RegCloseKey
RegSetValueW
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyW
RegQueryValueW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW

shell32

ExtractIconW
SHGetPathFromIDListW
ord155
DragQueryFileW
DragFinish
SHBrowseForFolderW

comctl32

InitializeFlatSB
_TrackMouseEvent
FlatSB_EnableScrollBar

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

CreateStreamOnHGlobal
CoRegisterMessageFilter
CoDisconnectObject
CreateDataAdviseHolder
OleSaveToStream
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateOleAdviseHolder
CreateDataCache
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLoadFromStream
StgCreateDocfileOnILockBytes
ReadClassStm
OleIsCurrentClipboard
OleSetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CoUninitialize
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
ReadFmtUserTypeStg
CoTaskMemFree
CoCreateInstance
OleFlushClipboard
OleGetClipboard
CreateILockBytesOnHGlobal
DoDragDrop

oleaut32

OleCreateFontIndirect
OleLoadPicture
VariantCopy
OleCreatePropertyFrame
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysFreeString
SysStringLen
LoadRegTypeLi
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreatePictureIndirect
SysAllocString

npdvrnet

KtPtzControl
KtReleaseDevice
KtPreview
KtStopVideo
KtAudioStream
KtPreShowLast
SetVolume
KtCapture
KtGetChSignal
KtLogin
OpenAudio
KtParaGet
KtParaSet
KtOpenDevice
KtGetIPAddrFormTutis
KtFileDownLoad
KtSearchFile
KtSearchFileOnPage
KtGetRecordFileNum
KtGetCalenda
KtStopFileDownLoad
KtSendTestMsg
HI_VOICE_DecodeFrame
HI_VOICE_DecReset
KtRecord

np264play

KtNextFrame
KtGetSpeed
KtChangeSpeed
KtPause
KtSetVolume
KtResetPlayPosition
KtStartPlayFile
KtGetPlayState
KtStopPlay
KtShowLastFrame

nplanguage

KtLoadStringT
KtLoadStringA
KtLoadLanguage
KtCloseLanguage

avifil32

AVIFileCreateStreamW
AVIStreamSetFormat
AVIStreamWrite
AVIFileExit
AVIFileOpenW
AVIFileInit

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ws2_32

htonl
ntohl

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c466129b2e4964074975c3eb8b64ca1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

npdvrnet

np264play

nplanguage

avifil32

version

ws2_32

oleacc

Exports

Exports

Sections

.text Size: 584KB - Virtual size: 584KB

.rdata Size: 146KB - Virtual size: 145KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 67KB - Virtual size: 67KB

.text
Size: 584KB - Virtual size: 584KB

.rdata
Size: 146KB - Virtual size: 145KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 67KB - Virtual size: 67KB