NEAS[.]03ec1a1c559456d655f675f2b9f28300[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.03ec1a1c559456d655f675f2b9f28300.exe
Size

201KB
MD5

03ec1a1c559456d655f675f2b9f28300
SHA1

72b6f8d02827c84457eb38185d31dd690aff809b
SHA256

0a092ed0bbb29f8900daf7c52029c6577589a38ee6ac5767a8614c03016c6d1d
SHA512

31fccab3913b675dc96a7b49574d3df47dbeed759faf619a6767a1aecc4edb9302e3cac210d3c71cc3061e255f8cd1e680190faa6588a7cbe5b21dfa70b9d947
SSDEEP

3072:xObZ8colYfpq70nzGNL3j4JLoo/CrbtYKXeMIftffjmN7DFm:xOlnolYfnGlXrbLOMYVfjmN/Fm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.03ec1a1c559456d655f675f2b9f28300.exe

Files

NEAS.03ec1a1c559456d655f675f2b9f28300.exe
.exe windows:4 windows x86

fa435b703c697dbe6c1f3625c8d09f05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetFileTime
GetFileAttributesA
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessVersion
GetOEMCP
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
TerminateProcess
HeapFree
TlsGetValue
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFree
LockResource
FindResourceA
LoadResource
GetPrivateProfileStringA
lstrcmpA
WritePrivateProfileStringA
GetModuleFileNameA
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
LocalFree
MulDiv
GlobalFlags
SetLastError
lstrcpynA
GetFullPathNameA
FindClose
GetVolumeInformationA
FindFirstFileA
GetStdHandle
SetEndOfFile
lstrcatA
SetCurrentDirectoryA
GetFileType
FlushFileBuffers
UnlockFile
CreateProcessA
LockFile
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
FreeLibrary
GetLastError
LoadLibraryA
GlobalAddAtomA
GetVersion
GlobalGetAtomNameA
GetProcAddress
GlobalFindAtomA
GetModuleHandleA
WideCharToMultiByte
CloseHandle
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
lstrcmpiA
GlobalAlloc
GlobalDeleteAtom
GlobalLock
GetCurrentThread
GetCurrentThreadId
HeapDestroy
GlobalUnlock
HeapCreate
SetHandleCount
lstrcpyA

user32

CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
IsDialogMessageA
SetWindowTextA
ShowWindow
CharUpperA
ClientToScreen
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetMenuItemCount
GetSubMenu
GetDlgItem
IsWindowEnabled
EnableWindow
GetDC
FindWindowA
SendMessageA
SetMenuItemBitmaps
ModifyMenuA
GetWindowRect
UnregisterClassA

gdi32

EnumFontFamiliesA
GetClipBox
SetTextColor
GetObjectA
DeleteDC
SetBkColor
SaveDC
RestoreDC
GetStockObject
SelectObject
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa435b703c697dbe6c1f3625c8d09f05

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 77KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 77KB

.rsrc
Size: 4KB - Virtual size: 1KB