NEAS[.]9eea66b08bf7f92135da4047f71e90f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9eea66b08bf7f92135da4047f71e90f0.exe
Size

3.2MB
MD5

9eea66b08bf7f92135da4047f71e90f0
SHA1

62cf6f2d08e7f07f7d8051d526e11059d16f727c
SHA256

6e2b60eb0e07785e781d60cee1f1c79497f3e24cee85be71de7217ae1f821332
SHA512

44a07970f969a44f033b7dc5498d4a8f9cb9c6c7aab4114d6e623429aa52edc8e6490ca16925b580bcbcbef4e80a51a016622ec78661264f14a0518522ff839f
SSDEEP

24576:wij9f8VOt9HxNLGwFH5W2SNIVTKc88erRaXwiPi4jfdYelYFyIm3s33r8r7DIw+s:wM4sXNuAcITt6jVaTYc1iU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9eea66b08bf7f92135da4047f71e90f0.exe

Files

NEAS.9eea66b08bf7f92135da4047f71e90f0.exe
.exe windows:4 windows x86

10dd7dbc1fe640b0c6c4a406599961c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA
SHAutoComplete

winmm

waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
sndPlaySoundA
PlaySoundA

kernel32

GetProfileIntA
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetCurrentDirectoryA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
CompareStringA
GetTempPathA
GetPrivateProfileSectionNamesA
GetExitCodeThread
ResetEvent
GetVersionExA
GetLocalTime
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
CreateEventA
SetErrorMode
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
Sleep
VirtualFree
VirtualAlloc
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
WriteFile
lstrlenA
SetFilePointer
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
CopyFileA
ReadFile
GetFileSize
CreateFileA
GetFileAttributesA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
LocalFree
LocalAlloc
lstrcpynA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
MoveFileA
GetLastError
CreateDirectoryA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
GetPrivateProfileStringA
GetPrivateProfileIntA
GetStdHandle
WritePrivateProfileStringA
InitializeCriticalSection
LeaveCriticalSection
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
SetThreadPriority
GetCurrentThread
lstrcmpA
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
LocalSize
GetModuleHandleA
GetVersion
GlobalSize
GlobalFree
GetSystemDirectoryA
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteCriticalSection
CancelIo
GetTickCount
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection
PostQueuedCompletionStatus

user32

GetClassNameA
KillTimer
InsertMenuA
GetMenuStringA
DestroyIcon
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
SetTimer
IsRectEmpty
FillRect
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
SetCursorPos
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
TranslateMessage
GetMessageA
LoadIconA
SendMessageA
EnableWindow
RegisterWindowMessageA
SetRect
PostMessageA
FindWindowA
MessageBoxA
wsprintfA
GetWindow
GetClientRect
SetCapture
LoadCursorA
SetCursor
ScreenToClient
UpdateWindow
WindowFromPoint
ClientToScreen
ReleaseCapture
GetParent
IsWindowVisible
SetWindowPos
GetDlgCtrlID
GetFocus
GetCursorPos
EnableMenuItem
GetMenuItemCount
DeleteMenu
GetSubMenu
LoadMenuA
CharNextA
OffsetRect
UnregisterClassA
LockWindowUpdate
RegisterClipboardFormatA
SetMenu
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
SetParent
ShowOwnedPopups
PostQuitMessage
DestroyMenu
LoadStringA
PtInRect
InvalidateRect
IsZoomed
SetRectEmpty
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetClipboardFormatNameA
GetTabbedTextExtentA
SendMessageTimeoutA
IsWindowUnicode
GetWindowLongW
SetWindowLongW
DrawEdge
GetDoubleClickTime
GetWindowRgn
HideCaret
ShowCaret
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
UnionRect
GetCursor
GetMenuStringW
LookupIconIdFromDirectoryEx
CopyIcon
CreateIconIndirect
CreateIconFromResourceEx
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
InvertRect
PostThreadMessageA
DispatchMessageA
ValidateRect
IsClipboardFormatAvailable
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetWindowRgn
GetSysColorBrush
RegisterClassExA
GetKeyState
GetClipboardData
DrawTextA
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
GetWindowRect
CheckMenuRadioItem
GetIconInfo
SetClassLongA
DestroyCursor
RedrawWindow
GetDesktopWindow
GetDC
ReleaseDC
LoadBitmapA
GetSysColor
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadImageA
GetSystemMenu
AppendMenuA
CheckMenuItem
MessageBeep
InflateRect
GetSystemMetrics
DrawStateA
DrawFocusRect
CreatePopupMenu
SetMenuDefaultItem
EnumChildWindows
DrawAnimatedRects
MapVirtualKeyA
WaitMessage
DrawFrameControl
IsCharLowerA
GetKeyNameTextA

gdi32

SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
PtVisible
SaveDC
CreateFontA
GetCharWidthA
DeleteDC
GetTextMetricsA
CreateRectRgnIndirect
CreateBitmap
GetClipBox
SetBkMode
TextOutA
CreateRectRgn
CombineRgn
GetStockObject
CreateFontIndirectA
GetObjectA
CreateSolidBrush
SetBkColor
SetTextColor
ExtTextOutA
StretchDIBits
CreateDIBSection
SelectObject
DeleteObject
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
BitBlt
RectVisible
Escape
GetCurrentPositionEx
PolyBezierTo
GetClipRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PatBlt
GetMapMode
SetRectRgn
DPtoLP
LPtoDP
CopyMetaFileA
RestoreDC
GetBkColor
GetTextColor
Polygon
CreateDIBitmap
GetTextExtentPointA
ExtFloodFill
ExtTextOutW
GetTextExtentPoint32W
BeginPath
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
GetViewportOrgEx
Polyline
PtInRegion
RoundRect
CreatePolygonRgn
GetRgnBox
ExtCreateRegion
GetBitmapBits
EnumFontFamiliesExA
GetDIBits
GetTextAlign
StretchBlt
GetCurrentObject
SetPixel
GetWindowOrgEx

comdlg32

ChooseColorA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegSetValueA
RegOpenKeyExA

shell32

DragQueryFileA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
Shell_NotifyIconA
ord71
ShellExecuteA
ExtractIconA
SHAppBarMessage
SHGetFileInfoA

comctl32

ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw
ImageList_GetImageInfo
ImageList_Add
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent

oledlg

ord1
ord8

ole32

CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard

olepro32

ord253

oleaut32

VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SysAllocString
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
OleLoadPicturePath
VariantChangeTypeEx
SafeArrayGetLBound

ws2_32

htons
connect
select
WSAStartup
gethostname
gethostbyname
WSACleanup
closesocket
getpeername
inet_ntoa
ioctlsocket
WSACloseEvent
WSASend
WSARecv
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
socket
listen
bind
WSASocketA
WSACreateEvent
WSAEventSelect

pdh

PdhCollectQueryData
PdhOpenQueryA
PdhAddCounterA
PdhCloseQuery
PdhGetFormattedCounterValue

avifil32

AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIFileInit
AVIStreamRelease

msvfw32

ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose
DrawDibDraw

skinh

SkinH_SetAero
SkinH_AttachRes
SkinH_AdjustAero

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10dd7dbc1fe640b0c6c4a406599961c3

Headers

File Characteristics

Imports

shlwapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

pdh

avifil32

msvfw32

skinh

wininet

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 248KB - Virtual size: 245KB

.data Size: 92KB - Virtual size: 112KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 248KB - Virtual size: 245KB

.data
Size: 92KB - Virtual size: 112KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB