NEAS[.]7e68df5ec3fbc08c379a179a26297e70[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7e68df5ec3fbc08c379a179a26297e70.exe
Size

640KB
MD5

7e68df5ec3fbc08c379a179a26297e70
SHA1

814d2ccfca41ef6543bfc7be7085ea9939ec2e80
SHA256

3e7e9df5ac46748f5777edf8eeed87dd96de243ed436e2511480c649e0746f1e
SHA512

0b28e7b02137a21fa92cc9e82ce2479bdf5c71a36b657e664f6a142a436395e83ff2ad2cb99279b2ea6ab3a341ee1a3785cbfee34bba8dafa0aefe9d7e893b65
SSDEEP

6144:ORzKIFlnkugpUvP+FC075mOQn/s+kWWd1X7nX63RzeQZ2XIS5upJWykvPCVFdStN:ORZLk9Uvi2n/Lmj0Mz0WykvP73DQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7e68df5ec3fbc08c379a179a26297e70.exe

Files

NEAS.7e68df5ec3fbc08c379a179a26297e70.exe
.exe windows:4 windows x86

88da4f4c350eff9985fe3bc823d713f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
ControlService
DeleteService
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

DeleteObject
CreateSolidBrush
CreateCompatibleDC
SelectPalette
RealizePalette
CreateCompatibleBitmap
SelectObject
GetStockObject
SetViewportOrgEx
DeleteDC
BitBlt
MoveToEx
LineTo
GetTextMetricsA
GetTextExtentPoint32A
SetTextColor
CreatePen
SetPixel
CreateBitmap
CreatePatternBrush
CreateICA
GetSystemPaletteEntries
CreatePalette
GetViewportOrgEx
OffsetClipRgn
OffsetViewportOrgEx
GetRgnBox
SelectClipRgn
CreateRectRgnIndirect
GetClipRgn
OffsetRgn
IntersectClipRect
CreateRectRgn
CombineRgn
SetROP2
GetDeviceCaps
GetNearestColor
SetPixelV
BeginPath
Polyline
EndPath
FillPath
AbortPath
Rectangle
FrameRgn
PaintRgn
GetTextFaceA
CreateFontIndirectA
GetCharWidth32A
GetCharWidthA
GetCharacterPlacementA
SetTextAlign
TextOutA
SetBkMode
SetDIBitsToDevice
GetDIBits
CreateDIBSection
PtInRegion
SetBkColor

kernel32

GetVersionExA
ExitProcess
GetModuleFileNameA
GlobalAlloc
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFree
EnterCriticalSection
LeaveCriticalSection
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalFlags
InitializeCriticalSection
IsBadReadPtr
GetTempPathA
CloseHandle
CreateFileA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
RemoveDirectoryA
MoveFileA
SetFilePointer
ReadFile
WriteFile
GetFileSize
SetEndOfFile
FindFirstFileA
FindClose
GetFileTime
MultiByteToWideChar
FindNextFileA
GetModuleHandleA
GetDiskFreeSpaceA
FileTimeToSystemTime
lstrcpyA
lstrlenA
GetTickCount
GetLocalTime
GetDateFormatA
GetTimeFormatA
GetCommandLineA
GetStartupInfoA
GetSystemDirectoryA
WideCharToMultiByte
RtlUnwind
GetCurrentProcess
DuplicateHandle
GetStdHandle
DebugBreak
TlsAlloc
TlsGetValue
TlsSetValue
GetEnvironmentStrings
FreeEnvironmentStringsA
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetCurrentThread

oleaut32

CreateDispTypeInfo
CreateStdDispatch
RegisterActiveObject
RevokeActiveObject

shell32

SHAppBarMessage
SHFileOperationA
ShellExecuteA
DragFinish
DragQueryFileA

user32

MessageBoxA
MessageBeep
RegisterClassExA
CreateWindowExA
DispatchMessageA
PeekMessageA
DefWindowProcA
LoadCursorA
LoadIconA
LoadStringA
LoadMenuA
GetSubMenu
SendMessageA
ShowWindow
UpdateWindow
AdjustWindowRectEx
SetWindowLongA
DestroyWindow
SetWindowTextA
GetActiveWindow
GetWindowLongA
SetWindowPos
IsWindowVisible
GetWindow
MoveWindow
GetWindowPlacement
GetClientRect
GetParent
GetDesktopWindow
GetTopWindow
SetActiveWindow
SetCapture
ReleaseCapture
IsIconic
IsZoomed
ScreenToClient
InvalidateRect
GetDC
FillRect
ReleaseDC
DefMDIChildProcA
BeginPaint
EndPaint
GetWindowDC
FrameRect
GetMessageTime
GetKeyState
SetCursor
GetKeyboardState
ToAscii
EnableMenuItem
SetFocus
DefFrameProcA
FlashWindow
GetForegroundWindow
GetCapture
GetMessagePos
GetMessageA
PostMessageA
GetAsyncKeyState
MapVirtualKeyA
SetTimer
KillTimer
GetCursorPos
GetDoubleClickTime
GetSysColor
DrawTextExA
GetSysColorBrush
DrawTextA
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
GetCaretBlinkTime
DrawFrameControl
DrawFocusRect

winmm

waveOutOpen
waveOutReset
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader

wsock32

WSACleanup
WSAStartup
socket
WSAGetLastError
setsockopt
closesocket
WSAAsyncSelect
WSACancelAsyncRequest
gethostname
gethostbyname
getsockname
getpeername
WSAAsyncGetHostByName
htons
connect
shutdown
listen
accept
send
inet_ntoa
recv
sendto
ioctlsocket
ntohs
bind

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CoCreateGuid
CoRegisterClassObject
CoRevokeClassObject
DoDragDrop
ReleaseStgMedium
RegisterDragDrop

Sections

.text
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.exc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88da4f4c350eff9985fe3bc823d713f0

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

oleaut32

shell32

user32

winmm

wsock32

ole32

Sections

.text Size: 418KB - Virtual size: 418KB

.rdata Size: 53KB - Virtual size: 53KB

.exc Size: 15KB - Virtual size: 15KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 34KB - Virtual size: 33KB

.CRT Size: 512B - Virtual size: 48B

.idata Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 40KB

.reloc Size: 43KB - Virtual size: 42KB

.text
Size: 418KB - Virtual size: 418KB

.rdata
Size: 53KB - Virtual size: 53KB

.exc
Size: 15KB - Virtual size: 15KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 34KB - Virtual size: 33KB

.CRT
Size: 512B - Virtual size: 48B

.idata
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 40KB

.reloc
Size: 43KB - Virtual size: 42KB