NEAS[.]0ed0fa2853e97a179ab7e196cc2a2c00[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0ed0fa2853e97a179ab7e196cc2a2c00.exe
Size

1.9MB
MD5

0ed0fa2853e97a179ab7e196cc2a2c00
SHA1

2abdb11e0bf9619c7ba1a7bf776d484098fa8914
SHA256

6c09f0959a59edaa6c939a85f9be270f95faec4f7b9aa255e97d70be8b74c0dd
SHA512

c05e092979092f499737b6fd2c2b0910cf3300728b1ab4b7790709cf8601faeff0ebcb98666bc64d3d54649c5d601fc2838f457e73311838e0d1879182f5a6dc
SSDEEP

24576:uUAHEyMExaWWtr8Writcg3Z54pY0AgH0qRPY9n5B8Ajg83e11BUC/88pViwbvone:WH9MS+t4u1gVn8M2t/5tj6lr0GlBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0ed0fa2853e97a179ab7e196cc2a2c00.exe

Files

NEAS.0ed0fa2853e97a179ab7e196cc2a2c00.exe
.exe windows:4 windows x86

a19db5cf60da0c048ca4ae2c5fe775fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetCancelConnectionA
WNetCancelConnectionW
WNetCloseEnum

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
GetLastError
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
DebugBreak
HeapReAlloc
VirtualAlloc
HeapAlloc
QueryPerformanceCounter
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
WriteFile
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetOEMCP

user32

InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsCharAlphaA
IsCharAlphaNumericA
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
LockWindowUpdate
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
GetScrollInfo
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
GetWindowThreadProcessId
SetCursor
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TabbedTextOutA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
VkKeyScanA
GetPropA
GetParent
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyState
GetKeyNameTextA
GetKeyboardType
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetScrollRange
SetClipboardData
GetScrollPos
GetKeyboardState
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawTextA
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffA
CharNextA
CharLowerBuffA
CharLowerA
CallWindowProcA
CallNextHookEx
BeginPaint
ReleaseDC
PtInRect

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA

oleaut32

VariantClear
VariantChangeTypeEx
SysStringLen
SysReAllocStringLen
SysFreeString
SysAllocStringLen
SafeArrayRedim
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreate
VariantCopyInd

Sections

.text
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ul821
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a19db5cf60da0c048ca4ae2c5fe775fc

Headers

File Characteristics

Imports

mpr

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 436KB - Virtual size: 434KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 256KB - Virtual size: 256KB

.ul821 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 436KB - Virtual size: 434KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 256KB - Virtual size: 256KB

.ul821
Size: 1.2MB - Virtual size: 1.2MB