NEAS[.]66e814e8eaf7949d3396d787715c7710[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.66e814e8eaf7949d3396d787715c7710.exe
Size

132KB
MD5

66e814e8eaf7949d3396d787715c7710
SHA1

556fb4f7f29647b3ee873cd0580ebf78e1a42cf5
SHA256

a12beb04a358e806d795c6ae9ce7a65566aef816178f033d38ead7806bbe1346
SHA512

ee72f5b0e7b887a77822c0fbb1deb7c827f8b8b949da12494a4e2c732c867ac97eeb2986c80e96ade6466e1109a5f87afda9a03ad63f423be2c5b77e1856256a
SSDEEP

3072:OUk6fNfxh0o2f0XLJrK2oCNup9lLjS0GJa3UPhoy:7FXLBynlLjSnJqUPhh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.66e814e8eaf7949d3396d787715c7710.exe

Files

NEAS.66e814e8eaf7949d3396d787715c7710.exe
.exe windows:4 windows x86

425b33e7eab82beb2580d0a8f0135b41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qtcore4

_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z5qFreePv
_Z7qMemSetPvij
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray7reallocEi
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QTranslator4loadERK7QStringS2_S2_S2_
_ZN11QTranslatorC1EP7QObject
_ZN11QTranslatorD1Ev
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication17installTranslatorEP11QTranslator
_ZN16QCoreApplication9argumentsEv
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN5QCharC1Ec
_ZN5QFile11setFileNameERK7QString
_ZN5QFileC1ERK7QString
_ZN5QFileD1Ev
_ZN5QTime5startEv
_ZN7QLocale6systemEv
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString7replaceE5QCharS0_N2Qt15CaseSensitivityE
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1Ey
_ZN8QVariantD1Ev
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZNK11QMetaObject2trEPKcS1_
_ZNK5QChar7toAsciiEv
_ZNK5QFile6existsEv
_ZNK5QTime7elapsedEv
_ZNK7QLocale4nameEv
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString3argEciRK5QChar
_ZNK7QString3argEdiciRK5QChar
_ZNK7QString3argExiiRK5QChar
_ZNK7QString3argEyiiRK5QChar
_ZNK7QString4leftEi
_ZNK7QString7toAsciiEv
_ZNK7QString8toLatin1Ev
_ZNK8QVariant5toIntEPb
_ZNK9QFileInfo10isReadableEv
_ZNK9QFileInfo16absoluteFilePathEv
_ZNK9QFileInfo4sizeEv
_ZNK9QFileInfo6existsEv
_ZNK9QFileInfo6isFileEv

qtgui4

_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QStatusBar11showMessageERK7QStringi
_ZN10QStatusBarC1EP7QWidget
_ZN11QFileDialog15getSaveFileNameEP7QWidgetRK7QStringS4_S4_PS2_6QFlagsINS_6OptionEE
_ZN11QHBoxLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow12setStatusBarEP10QStatusBar
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox11informationEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QMessageBox7warningEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QMessageBox8criticalEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButtonC1EP7QWidget
_ZN11QToolButtonC1EP7QWidget
_ZN11QVBoxLayoutC1EP7QWidget
_ZN11QVBoxLayoutC1Ev
_ZN12QApplication17setOverrideCursorERK7QCursor
_ZN12QApplication21restoreOverrideCursorEv
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QProgressBar14setTextVisibleEb
_ZN12QProgressBar5resetEv
_ZN12QProgressBar8setRangeEii
_ZN12QProgressBar8setValueEi
_ZN12QProgressBar9setFormatERK7QString
_ZN12QProgressBarC1EP7QWidget
_ZN15QAbstractButton7setIconERK5QIcon
_ZN15QAbstractButton7setTextERK7QString
_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QLabel5clearEv
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setToolTipERK7QString
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setStatusTipERK7QString
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setSizePolicyE11QSizePolicy
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setAcceptDropsEb
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget5closeEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QCheckBoxC1EP7QWidget
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox10removeItemEi
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBox5clearEv
_ZN9QComboBoxC1EP7QWidget
_ZN9QGroupBox8setTitleERK7QString
_ZN9QGroupBoxC1EP7QWidget
_ZN9QLineEdit7setTextERK7QString
_ZN9QLineEditC1EP7QWidget
_ZNK15QAbstractButton9isCheckedEv
_ZNK7QWidget10sizePolicyEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZNK9QComboBox11currentTextEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZNK9QComboBox8findDataERK8QVarianti6QFlagsIN2Qt9MatchFlagEE
_ZNK9QComboBox8itemDataEii
_ZNK9QLineEdit4textEv
_ZTV11QSpacerItem
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__

kernel32

CloseHandle
CreateFileA
CreateSemaphoreA
DeviceIoControl
ExitProcess
FormatMessageA
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetDiskFreeSpaceExA
GetDriveTypeA
GetFileSizeEx
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
LocalFree
ReadFile
ReleaseSemaphore
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile

mingwm10

__mingwthr_key_dtor

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fclose
fopen
fputc
fputs
fread
free
fwrite
malloc
memcpy
printf
realloc
signal
sprintf
strcmp
strcpy
strncpy
vfprintf

libgcc_s_dw2-1

_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__emutls_get_address
__register_frame_info
__udivdi3

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eh_fram
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

425b33e7eab82beb2580d0a8f0135b41

Headers

File Characteristics

Imports

qtcore4

qtgui4

kernel32

mingwm10

msvcrt

libgcc_s_dw2-1

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 36KB - Virtual size: 36KB

.eh_fram Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 140B

.idata Size: 12KB - Virtual size: 11KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 36KB - Virtual size: 36KB

.eh_fram
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 140B

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 6KB - Virtual size: 5KB