NEAS[.]dac05345f1ea0e4684b1a70721395ba0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dac05345f1ea0e4684b1a70721395ba0.exe
Size

255KB
MD5

dac05345f1ea0e4684b1a70721395ba0
SHA1

c346d80b2c238a825aa29646eb34a1ee7cbf4b14
SHA256

f0b94f2203dd403908b1acf034446e0045506f867947a89052f756580e2ab331
SHA512

abc1c9430d4e301bc3b82684d12e317e8c353d10bf14aaae9c2d96e9ad0c91cb32e98ef7978cd5ddeec58fd55087bb29505a9b8838880f5b17eff6fa4adc6480
SSDEEP

6144:1XtBtYIF47XWDluyua0rMQHnXcOsw3YrRM87L1:dtBtYp7XWA4PwMMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dac05345f1ea0e4684b1a70721395ba0.exe

Files

NEAS.dac05345f1ea0e4684b1a70721395ba0.exe
.exe windows:4 windows x86

8dd441c79bcb0f49a794931f21739f56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
SetCursorPos
OffsetRect
ClientToScreen
TranslateMessage
wsprintfA
GetDC
ReleaseDC
GetMessageA
SetCursor
DefWindowProcA
SetWindowLongA
LoadCursorA
PostQuitMessage
MessageBoxA
GetWindowLongA
SetFocus
PeekMessageA
ShowWindow
CreateWindowExA
SetRect
WaitMessage
SetWindowPos
GetWindowRect
GetClientRect
RegisterClassA
GetSystemMetrics
LoadIconA

gdi32

GetDeviceCaps
GetStockObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoInitialize
CoCreateInstance
CLSIDFromString
CoUninitialize

kernel32

WaitForSingleObject
SetEvent
MapViewOfFile
CreateFileMappingA
CloseHandle
OpenEventA
GetVersionExA
OutputDebugStringA
GetTickCount
GetTempPathA
GetDriveTypeA
_lcreat
_lopen
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
RemoveDirectoryA
CreateDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetLastError
SetFilePointer
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
EnterCriticalSection
GetCurrentProcessId

dsound

ord1

ddraw

DirectDrawCreate

winmm

timeGetTime
auxGetVolume
mciSendCommandA
timeKillEvent
waveOutGetNumDevs
auxGetDevCapsA
auxGetNumDevs
waveOutGetDevCapsA
auxSetVolume
waveOutGetVolume
timeSetEvent
waveOutSetVolume

avifil32

AVIStreamInfoA
AVIStreamStart
AVIStreamRead
AVIStreamReadFormat
AVIFileGetStream
AVIFileRelease
AVIStreamRelease
AVIFileExit
AVIFileInit
AVIFileOpenA
AVIStreamLength
AVIStreamSampleToTime
AVIStreamTimeToSample

msvfw32

ICLocate
ICDecompress
ICClose
ICSendMessage

Sections

.text
Size: 207KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WWP32
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8dd441c79bcb0f49a794931f21739f56

Headers

File Characteristics

Imports

user32

gdi32

advapi32

ole32

kernel32

dsound

ddraw

winmm

avifil32

msvfw32

Sections

.text Size: 207KB - Virtual size: 500KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 23KB - Virtual size: 322KB

.rsrc Size: 8KB - Virtual size: 8KB

.WWP32 Size: 1024B - Virtual size: 1024B

.text
Size: 207KB - Virtual size: 500KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 23KB - Virtual size: 322KB

.rsrc
Size: 8KB - Virtual size: 8KB

.WWP32
Size: 1024B - Virtual size: 1024B