NEAS[.]b3463bb69118cb831e29fcb21f298270[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b3463bb69118cb831e29fcb21f298270.exe
Size

879KB
MD5

b3463bb69118cb831e29fcb21f298270
SHA1

3232b194e9d69f35de8d4cb2f4b0a678593ec38b
SHA256

6b50f52577560227eff5ae3c1aa016b73abf0583dbac326bbd6d76b5645d3042
SHA512

e9b42b1bac0bb37a71c6fae356ac51e03341e0efd629bcca88681c44ae6547e638e1ff70e2a8c994257accb9613ee84d1f1786a4ac1203650d5a452f6c8c5bb8
SSDEEP

24576:Vj68bqR3Qlvapd/+l2HJM6EhREL6a9E5aoR:sQdjUP0Rx5aoR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b3463bb69118cb831e29fcb21f298270.exe

Files

NEAS.b3463bb69118cb831e29fcb21f298270.exe
.exe windows:5 windows x86

9e06e1fc913f60f98aa3cb51e3106814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FindResourceExW
WideCharToMultiByte
CreateFileA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetCurrentProcessId
WriteFile
ExitProcess
Sleep
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
lstrlenA
lstrcpynA
LockResource
WaitForSingleObject
ResetEvent
CreateThread
SetEvent
CloseHandle
CreateEventW
GetCurrentThread
LoadLibraryExA
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
ReadFile
ResumeThread
SetThreadContext
GetThreadContext
SuspendThread
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
WriteProfileStringW
SetStdHandle
GetTickCount
OutputDebugStringW
IsBadStringPtrW
FreeLibrary
LoadLibraryW
lstrcpynW
SetLastError
lstrcatW
GlobalAlloc
MulDiv
GlobalUnlock
GlobalLock
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
GetVersionExW
lstrcpyW
lstrlenW
lstrcmpW
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
RaiseException

user32

MessageBeep
IsWindowEnabled
UnhookWindowsHookEx
SetWindowsHookExW
CheckMenuRadioItem
GetMenuItemID
EnableMenuItem
AppendMenuW
DeleteMenu
GetDlgCtrlID
SystemParametersInfoW
LoadStringA
PostQuitMessage
CreatePopupMenu
UpdateWindow
GetWindowThreadProcessId
GetActiveWindow
IsMenu
DestroyMenu
TranslateAcceleratorW
SetClassLongW
MsgWaitForMultipleObjects
DrawEdge
GetMessageW
TranslateMessage
DispatchMessageW
GetClassNameW
CreateAcceleratorTableW
ScreenToClient
SetCapture
ReleaseCapture
FillRect
GetSysColorBrush
FrameRect
GetMessagePos
WindowFromPoint
GetMonitorInfoW
AdjustWindowRectEx
TrackPopupMenuEx
ModifyMenuW
CallNextHookEx
DrawFrameControl
MonitorFromPoint
RemoveMenu
InvalidateRgn
GetDC
GetDesktopWindow
DestroyAcceleratorTable
GetWindowTextA
ClientToScreen
SetFocus
PostThreadMessageW
GetWindowPlacement
GetIconInfo
SetMenu
GetKeyState
GetFocus
IsChild
MessageBoxW
PeekMessageW
EndPaint
DrawTextW
DrawIconEx
BeginPaint
MapWindowPoints
GetClassLongW
CharNextW
LoadStringW
LoadMenuW
LoadAcceleratorsW
OffsetRect
InflateRect
SetRectEmpty
RegisterWindowMessageW
PostMessageW
ReleaseDC
GetWindowDC
SetCursor
SetWindowTextW
GetDlgItem
SetMenuItemInfoW
GetMenuItemInfoW
SetMenuDefaultItem
GetMenu
GetSubMenu
GetMenuItemCount
RegisterClassExW
LoadImageW
wvsprintfW
LoadCursorW
GetClassInfoExW
DestroyIcon
MoveWindow
GetWindowTextW
GetWindowTextLengthW
LoadIconW
GetWindow
InvalidateRect
PtInRect
GetParent
CreateWindowExW
SetPropW
IsWindowVisible
GetPropW
ShowWindow
SetWindowPos
IsWindow
GetSystemMetrics
SetWindowLongW
CallWindowProcW
DefWindowProcW
GetWindowRect
RedrawWindow
GetClientRect
DestroyWindow
GetWindowLongW
GetSysColor
LoadBitmapW
EqualRect
SendMessageW
CharLowerW
UnregisterClassA

gdi32

PatBlt
CreatePatternBrush
CreateBitmap
SetBkColor
SetBrushOrgEx
CreatePen
Polygon
SetTextColor
SetViewportOrgEx
OffsetWindowOrgEx
SetWindowOrgEx
CreateFontIndirectW
GetTextExtentPoint32W
CreateSolidBrush
BitBlt
GetObjectW
GetDeviceCaps
SetStretchBltMode
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
SelectObject
DeleteDC
GetStockObject
CreateDIBSection
SetBkMode
StretchBlt

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW

ole32

CoUninitialize
OleInitialize
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
OleUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CLSIDFromString
CoTaskMemFree

oleaut32

DispCallFunc
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
SysStringLen
VariantClear
VariantInit
SysAllocString
SysFreeString

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
ImageList_LoadImageW
InitCommonControlsEx

msimg32

TransparentBlt

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e06e1fc913f60f98aa3cb51e3106814

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 13KB - Virtual size: 22KB

.rsrc Size: 642KB - Virtual size: 641KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 13KB - Virtual size: 22KB

.rsrc
Size: 642KB - Virtual size: 641KB