NEAS[.]c2d6a5c9d6457838563c4a59258402e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c2d6a5c9d6457838563c4a59258402e0.exe
Size

424KB
MD5

c2d6a5c9d6457838563c4a59258402e0
SHA1

3678ce87ab93c78e2dcaef9e8d3f7bc01a9775d4
SHA256

af3b6a6cd1b6a87be94fdcc4267882a269f05317e02bdb31348b84df75435c2a
SHA512

07b6569cc07f691606fd0743bd900b582d292726ca4ad74ca8d2203be61105ee407ac8f306aae4591ed968acc2c7582ed2eb92e103673d63ffce74ebfe6ea6f0
SSDEEP

6144:JbGQcL+lUqjBvGNML0fGgl1FmRJiWfhiGtttN5ec2R7xfApt:Jb1caUqjBaML1I1Fm7iWJiGPtN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c2d6a5c9d6457838563c4a59258402e0.exe

Files

NEAS.c2d6a5c9d6457838563c4a59258402e0.exe
.exe windows:4 windows x86

b875bebf4b6c0c0059b52dc6f8f0a012

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetAddConnection2A
WNetCancelConnection2A

winmm

timeGetTime

kernel32

SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
GetTickCount
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
CreateThread
ExitThread
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
GetACP
LCMapStringA
LocalFileTimeToFileTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
MoveFileA
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
MulDiv
lstrlenW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
lstrcpynA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
LocalFree
WritePrivateProfileStringA
GlobalAddAtomA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntA
GetPrivateProfileStringA
ResumeThread
CreateDirectoryA
SetFileAttributesA
SetEndOfFile
SetFileTime
FindFirstFileA
GetFileAttributesA
GetFileTime
FindClose
ReleaseMutex
CreateMutexA
WaitForSingleObject
GetCurrentProcess
GetPriorityClass
SetPriorityClass
GlobalMemoryStatus
GetVersionExA
GetLogicalDrives
DeleteFileA
GlobalAlloc
WriteFile
FormatMessageA
GetDriveTypeA
GetTempPathA
GetModuleFileNameA
CreateFileA
CloseHandle
SetFilePointer
ReadFile
GetFileSize
GetLastError
GetProfileStringA
LCMapStringW

user32

KillTimer
WindowFromPoint
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
SetCapture
PostThreadMessageA
SetParent
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
MapDialogRect
GetWindow
SetWindowContextHelpId
wsprintfA
SetFocus
ShowWindow
SetTimer
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetMenuStringA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
SetCursor
ShowOwnedPopups
PostQuitMessage
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
DeleteMenu
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
LoadIconA
IsWindowVisible
InflateRect
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
GetSysColorBrush
SetWindowPos
LoadCursorA
EqualRect
SendMessageA
IsWindow
SetRect
MessageBoxA
RegisterWindowMessageA
FindWindowA
PostMessageA
EnableWindow
UpdateWindow
InsertMenuA
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadMenuA
DestroyMenu
ReleaseCapture
CopyRect
LoadAcceleratorsA
IsZoomed
SetRectEmpty
GetDC
ReleaseDC
GetDesktopWindow
CharUpperA
InvalidateRect
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetClientRect
GetWindowTextA
BeginDeferWindowPos
TranslateAcceleratorA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
DeleteObject
CreateRectRgn
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateFontIndirectA
GetTextColor
GetBkColor
GetMapMode
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC
SetBkMode
GetStockObject
RestoreDC
SaveDC
DeleteDC
GetTextMetricsA
SelectObject
CreateRectRgnIndirect
PatBlt
DPtoLP
LPtoDP
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPointA
CreateBitmap
CreateDIBitmap
GetTextExtentPoint32A

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
RegDeleteKeyA

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ExtractIconA

comctl32

ord17

oledlg

ord8

ole32

CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoTaskMemFree
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b875bebf4b6c0c0059b52dc6f8f0a012

Headers

File Characteristics

Imports

mpr

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 288KB - Virtual size: 286KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 44KB - Virtual size: 64KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: 288KB - Virtual size: 286KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 44KB - Virtual size: 64KB

.rsrc
Size: 24KB - Virtual size: 22KB