NEAS[.]491ef998cf31af8360cfd9ef7af2bb80[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.491ef998cf31af8360cfd9ef7af2bb80.exe
Size

2.0MB
MD5

491ef998cf31af8360cfd9ef7af2bb80
SHA1

f5c9914adb9003a6c0816bf20aacdb4a6bdea1ae
SHA256

c153dbb7e704a30c58f6a9755d4b6c2fa049fc0b260fe7d0a7d1ebc57792b907
SHA512

7680db300a0fa9e55d90bc4ce9cecfe3f28bbc06e21d9446d8178cf9531f2d07556150ecc953d779396a154b2767ad2cdb81bc26f9d65a1a281169f984fe62d2
SSDEEP

24576:8HiTDyauRdIKxQXIvnipayNbSnH0cOBseKK1KAWh7zdztlHXninRBY62ElAw5zz1:pTmPddxr00P/oxyhO6D0nXd1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.491ef998cf31af8360cfd9ef7af2bb80.exe

Files

NEAS.491ef998cf31af8360cfd9ef7af2bb80.exe
.exe windows:4 windows x86

99fa98ef1de5543d6a7c908a129c3863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeSetEvent
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalReAlloc
LocalUnlock
LockFile
LockResource
lstrcatW
lstrcmpA
lstrcmpiW
lstrcmpW
lstrcpynW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
GlobalGetAtomNameW
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFileTime
SetHandleCount
SetLastError
SetProcessWorkingSetSize
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultLCID
GetUserDefaultLangID
GetTimeZoneInformation
GetTimeFormatA
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTime
GetSystemInfo
GetStringTypeExW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetProfileIntW
GetProcessHeap
GetPrivateProfileStringW
GetPrivateProfileIntW
GetOEMCP
GetNumberFormatW
SetSystemPowerState
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentStringsW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDateFormatA
GetCurrentThread
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetCommandLineW
GetAtomNameW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindNextChangeNotification
FindFirstFileW
FindFirstChangeNotificationW
FindCloseChangeNotification
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
FatalAppExitA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
CreateDirectoryW
CopyFileW
ConvertDefaultLocale
CompareStringW
CompareStringA
OpenMutexA
CreateMutexA
GetSystemDefaultLCID
lstrcpyW
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
CreateEventW
OpenEventW
WaitForSingleObject
CloseHandle
CreateSemaphoreW
GetLastError
RtlUnwind
GetCurrentProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentVariableA
OutputDebugStringW
GetStringTypeW

user32

IsIconic
IsMenu
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
LockWindowUpdate
MapDialogRect
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterHotKey
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
ScrollWindowEx
SendDlgItemMessageA
SendDlgItemMessageW
SendNotifyMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemInt
SetDlgItemTextW
SetFocus
SetLastErrorEx
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
ValidateRect
WaitMessage
WindowFromDC
WindowFromPoint
WinHelpW
wsprintfW
wvsprintfW
IsDlgButtonChecked
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
InvertRect
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InSendMessage
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetTabbedTextExtentW
GetTabbedTextExtentA
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextW
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetDlgItemTextW
GetDlgItemInt
GetDlgCtrlID
GetDialogBaseUnits
GetDCEx
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
FrameRect
FindWindowW
FindWindowExW
FillRect
EqualRect
EnumWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawStateW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DragDetect
DispatchMessageW
DialogBoxIndirectParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateIconFromResourceEx
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyRect
CopyIcon
CopyAcceleratorTableW
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffW
CharPrevW
CharNextW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AttachThreadInput
AppendMenuW
AdjustWindowRectEx
ReuseDDElParam
UnpackDDElParam
FindWindowA
SendMessageA
SetForegroundWindow
GetFocus
GetParent
GetWindowLongW
GetDesktopWindow
SendMessageW
GetActiveWindow

gdi32

CreateEllipticRgn
CreateFontIndirectW
ArcTo
BitBlt
CloseMetaFile
CombineRgn
CreateFontW
CreateHalftonePalette
CreateHatchBrush
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePolygonRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteMetaFile
DeleteObject
DPtoLP
Ellipse
EndDoc
EndPage
EnumMetaFile
Escape
ExcludeClipRect
ExtCreatePen
ExtSelectClipRgn
ExtTextOutW
FillRgn
FrameRgn
GetBkColor
GetBkMode
GetBrushOrgEx
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceCaps
GetDIBColorTable
GetDIBits
GetMapMode
GetNearestColor
GetObjectType
GetObjectW
GetPixel
GetPolyFillMode
GetRgnBox
GetROP2
GetStockObject
GetStretchBltMode
GetTextAlign
GetTextColor
CreateCompatibleDC
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
CreateDIBSection
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LineTo
LPtoDP
ModifyWorldTransform
MoveToEx
OffsetClipRgn
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PatBlt
PlayMetaFile
PlayMetaFileRecord
PolyBezierTo
PolyDraw
Polyline
PolylineTo
PtVisible
RealizePalette
Rectangle
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipPath
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetColorAdjustment
SetDIBColorTable
SetDIBits
SetGraphicsMode
SetMapMode
SetMapperFlags
SetPixel
SetPixelV
SetPolyFillMode
SetRectRgn
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocW
StartPage
StretchDIBits
TextOutW
CreateDIBPatternBrushPt
CreateDIBitmap
GetViewportExtEx
AbortDoc
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyMetaFileW
CreateDCW

ole32

CoUninitialize
CreateBindCtx
CreateDataAdviseHolder
CreateFileMoniker
CreateGenericComposite
CreateILockBytesOnHGlobal
CreateItemMoniker
CreateOleAdviseHolder
CreateStreamOnHGlobal
DoDragDrop
GetHGlobalFromILockBytes
GetRunningObjectTable
IsAccelerator
OleCreateFromData
OleCreateFromFile
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleGetIconOfClass
OleInitialize
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLockRunning
OleQueryCreateFromData
CoTreatAsClass
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSaveToStream
OleSetClipboard
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
ReadClassStg
ReadFmtUserTypeStg
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
SetConvertStg
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgOpenStorage
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
WriteClassStg
WriteClassStm
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoRegisterClassObject
CoLockObjectExternal
CoInitialize
CoGetMalloc
OleQueryLinkFromData
CoGetClassObject

shlwapi

PathRemoveExtensionW
PathIsUNCW
PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
StrFormatByteSizeW
PathFindExtensionW

Sections

.text
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ve1011
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99fa98ef1de5543d6a7c908a129c3863

Headers

File Characteristics

Imports

winmm

version

kernel32

user32

gdi32

ole32

shlwapi

Sections

.text Size: 412KB - Virtual size: 411KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 396KB - Virtual size: 395KB

ve1011 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 412KB - Virtual size: 411KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 396KB - Virtual size: 395KB

ve1011
Size: 1.2MB - Virtual size: 1.2MB