NEAS[.]8a86b46370243eae6e4807e9e4b5fcd0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.8a86b46370243eae6e4807e9e4b5fcd0.exe
Size

236KB
MD5

8a86b46370243eae6e4807e9e4b5fcd0
SHA1

da04b79888df8b854acdb760347393b5a6d0fd37
SHA256

dccd417c07c8fb512db413431fe53119f242e51ebc6376431ad36daa9f42643c
SHA512

c58db86184ed6a96ab25ba5da755fef868ee85dca5843bfe290fe29bec3fcc88602da26904fba3033eaf4787257c3793a5e490ac4cad1805acf8f698e3f4b973
SSDEEP

1536:eGPAAl+N8kT5T1aQhh+ZgbCTDUU+bkWmNIQt5i+oZteife5osiI:eGPAAKSQhgIpmy0oZte2Js

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8a86b46370243eae6e4807e9e4b5fcd0.exe

Files

NEAS.8a86b46370243eae6e4807e9e4b5fcd0.exe
.dll windows:4 windows x86

219038477255a341c42f8b36c9c89cec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCommandLineA
RtlUnwind
RaiseException
HeapAlloc
HeapSize
HeapReAlloc
GlobalDeleteAtom
GetVersion
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
SetLastError
GetProcessVersion
GetLastError
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
ExitProcess
GetProcAddress
GetModuleHandleA
CreateFileMappingA
MapViewOfFile
WaitForSingleObject
lstrlenA
CloseHandle
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThreadId
CreateFileA
ReleaseMutex
CreateMutexA
Sleep
TerminateProcess
GetACP
HeapFree
GetFileSize

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
LoadStringA
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetTopWindow
EnableWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
MessageBoxA
GetCapture
PostMessageA
RegisterWindowMessageA
GetWindowRect
GetSystemMetrics
SystemParametersInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

ord17

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
Escape
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
TextOutA
ExtTextOutA
RectVisible

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Exports

Exports

_DCIio

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SHARED
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

219038477255a341c42f8b36c9c89cec

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

comctl32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 19KB

SHARED Size: 132KB - Virtual size: 128KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 19KB

SHARED
Size: 132KB - Virtual size: 128KB

.reloc
Size: 12KB - Virtual size: 10KB