NEAS[.]ece7d3a5ee9d41ffe9c4b593db526c00[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ece7d3a5ee9d41ffe9c4b593db526c00.exe
Size

1.6MB
MD5

ece7d3a5ee9d41ffe9c4b593db526c00
SHA1

09e3b7138ce311e67d2c7200252cdc8f253a7310
SHA256

ef58451fc5531900694c94df3124505ac952b95430174aebaed3313a5ba532e6
SHA512

e17f1973ef78580f30c6fa14f48aa2d66ffed2c4cb6f23130146cde01a399cf6a54ebf8889719c6b71d1663df6beb5d8a68cddec4e5689d666ff4a5dc0706d84
SSDEEP

49152:31qHpaKUHfqyTGbofHERg+66NnO9pMF0XwGznrAwNwK:31qJaH6Tnkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ece7d3a5ee9d41ffe9c4b593db526c00.exe

Files

NEAS.ece7d3a5ee9d41ffe9c4b593db526c00.exe
.exe windows:4 windows x86

9edb16d01e8ddead986db3f78a302c3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
RaiseException
SetStdHandle
GetACP
HeapReAlloc
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
TerminateProcess
CompareStringW
SetEnvironmentVariableA
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
Sleep
GetFileTime
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
GetLastError
lstrcpynA
EnterCriticalSection
lstrlenA
lstrcpyA
FreeLibrary
LocalAlloc
LocalFree
FormatMessageA
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
DuplicateHandle
GetCurrentProcess
CreateDirectoryA
ExitProcess
GetFileType
HeapFree
HeapAlloc
RtlUnwind
GetTickCount
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
SizeofResource
GlobalFlags
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSize
GetFileAttributesA
GetProfileStringA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
ResumeThread
WaitForSingleObject
lstrcmpA
GetCurrentThread
lstrlenW
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
MulDiv
GetModuleHandleA
LockResource
FindResourceA
ReadFile
LoadResource
lstrcmpiA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetProcAddress
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
CompareStringA

user32

CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
PtInRect
GetClassNameA
InflateRect
DestroyMenu
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
CopyRect
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
LoadCursorA
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
CharNextA
AdjustWindowRectEx
GetSysColorBrush
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
CharUpperA
LoadStringA
GetParent
IsWindowEnabled
GetWindowLongA
MessageBoxA
GetDesktopWindow
RegisterClipboardFormatA
GrayStringA
DrawTextA
TabbedTextOutA
RedrawWindow
IsWindow
GetSysColor
InvalidateRect
GetWindowRect
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
SetWindowRgn
GetDC
ReleaseDC
SetTimer
LoadIconA
FindWindowA
GetLastActivePopup
SetForegroundWindow
IsIconic
EnableWindow
GetClientRect
GetSubMenu
LoadBitmapA
wsprintfA
SetScrollRange

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreateBitmap
LPtoDP
DPtoLP
PatBlt
GetMapMode
GetTextColor
GetBkColor
SetTextColor
SetBkMode
SetBkColor
SelectObject
RestoreDC
SaveDC
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
CreateRectRgn
GetStockObject
BitBlt
CreateCompatibleDC
GetTextExtentPointA
CreateDIBitmap
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysFreeString
SysAllocStringLen

wsock32

WSACleanup
WSAStartup
socket
gethostbyname
connect
WSAGetLastError
setsockopt
closesocket
send
inet_ntoa
htons
ioctlsocket
recv

wininet

HttpQueryInfoA
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetQueryOptionA
InternetOpenUrlA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCloseHandle

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9edb16d01e8ddead986db3f78a302c3f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

wininet

Sections

.text Size: 208KB - Virtual size: 204KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 28KB - Virtual size: 109KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 208KB - Virtual size: 204KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 28KB - Virtual size: 109KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB