NEAS[.]81f809a70244206c850367e9d1e7c120[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.81f809a70244206c850367e9d1e7c120.exe
Size

292KB
MD5

81f809a70244206c850367e9d1e7c120
SHA1

9e146f34cf819ddffe990842fbfce292510e1750
SHA256

f48e60adf4b7bb87bae7ca0aa0737ac94740e66108d966a6028f300fb9c87dc2
SHA512

cdb966e2bf536417e7994f4864466bbb8161240771ae653a34c846fcd1f0b9ca39d8f1d968d3964e6958e6fc9c9be3b42020856be9b179d5770b94c1f352dc1f
SSDEEP

3072:sEkaQVF4iosF3G9ARP89OmzE5n4FBloOYMZjJDXrpCNOtnGMoNaUtnZ6I3bs/BSD:2/oGRP89OH9KuOYWYtZxLcSsQLH5Adm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.81f809a70244206c850367e9d1e7c120.exe

Files

NEAS.81f809a70244206c850367e9d1e7c120.exe
.exe windows:4 windows x86

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetACP
GetProfileStringA
HeapSize
HeapReAlloc
RaiseException
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
RtlUnwind
HeapAlloc
FormatMessageA
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
MulDiv
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
FreeLibrary
CreateMutexA
GetLastError
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
CloseHandle
GetModuleHandleA
GetProcAddress
WideCharToMultiByte
SetUnhandledExceptionFilter
MultiByteToWideChar

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MapDialogRect
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
InflateRect
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
PostQuitMessage
DrawTextA
ReleaseDC
SetWindowPos
PtInRect
PostMessageA
SendMessageA
UnregisterClassA
HideCaret
MoveWindow
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
SetForegroundWindow
SetWindowRgn
RedrawWindow
GetDC
GetParent
InvalidateRect
IsWindow
GetDesktopWindow
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
SetWindowContextHelpId
DrawIcon
GetWindowLongA
SetWindowLongA
LoadIconA
CopyRect
EnableWindow
ClientToScreen
OffsetRect
FindWindowA
FindWindowExA
GetWindow
IsWindowUnicode
GetWindowThreadProcessId
DestroyMenu
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetClassNameA
LoadCursorA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
UpdateWindow
SetWindowTextA
IsDialogMessageA
PeekMessageA
LoadBitmapA

gdi32

SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
RestoreDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject
CreateDIBSection
DeleteObject
DeleteDC
GetObjectA
GetPixel
CreatePolygonRgn
CreateFontA
GetStockObject
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

_TrackMouseEvent
ord17

oledlg

ord8

ole32

CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoRevokeClassObject

olepro32

ord253

oleaut32

VariantClear
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysAllocStringLen

gdiplus

GdipCloneBrush
GdipCreateSolidFill
GdipDrawString
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipDeleteBrush
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRectI
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipLoadImageFromStreamICM

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca47ba32a535e6232abbb11c2670d497

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

gdiplus

Sections

.text Size: 148KB - Virtual size: 147KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 88KB - Virtual size: 85KB

.text
Size: 148KB - Virtual size: 147KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 88KB - Virtual size: 85KB