NEAS[.]105a1b2c8eb9638c206e7d0d137bdfa0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.105a1b2c8eb9638c206e7d0d137bdfa0.exe
Size

204KB
MD5

105a1b2c8eb9638c206e7d0d137bdfa0
SHA1

233a41cf28366f924eab138af8ce7dc610c2331d
SHA256

6af24e97947df9417c8bb94a4677c6d4b22eaab6463a9ee902317ac21b98efe7
SHA512

6cc561e446160bbfa7c34c328f9235f61faa5d9b9b2448da4d7fa80bc7581bf63d3908bc1087d02d00b3090e989615cf60fbff03d47ad6972cd42db3a0fa6b3b
SSDEEP

3072:4dGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFU/:6GazIc6TVBMrOpzeJEsuirSGEMpgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.105a1b2c8eb9638c206e7d0d137bdfa0.exe

Files

NEAS.105a1b2c8eb9638c206e7d0d137bdfa0.exe
.exe windows:4 windows x86

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetWindowsDirectoryW
SetErrorMode
CreateFileMappingA
GetComputerNameA
QueryPerformanceCounter
GetModuleFileNameA
SetPriorityClass
lstrcpyn
GetFileType
InitializeCriticalSection
GetLogicalDrives
GetProcessHeap
GetNumberFormatA
LocalAlloc
CreateEventW
GetTimeFormatA
GetVersionExW
GetProcessHeaps
CopyFileExW
GetHandleInformation
GlobalGetAtomNameA
FlushFileBuffers
CreateNamedPipeW
CopyFileA
GetCurrentDirectoryA
OpenWaitableTimerW
GetCommandLineW
lstrlen
CopyFileExA
FreeLibrary
SetComputerNameW
GetProcAddress
EnumCalendarInfoA
FindAtomA
GetModuleHandleW
CreatePipe
OpenProcess
CreateMailslotW
BeginUpdateResourceW
IsDebuggerPresent
GetVersionExA
GetEnvironmentStringsW
GetModuleHandleA

user32

GetSysColorBrush
RegisterClassExW
GetWindowLongA
SetMenu
ArrangeIconicWindows
DialogBoxParamW
LoadIconW
CreateIcon
CharNextA
GetMessageW
LoadImageA
TrackPopupMenuEx
mouse_event
GetParent
OpenClipboard
LoadIconW
GetIconInfo
CheckRadioButton
GetIconInfo
GetWindowTextW
OffsetRect
SetWindowPos
GetMenuStringW
CopyRect
EnumWindows
SetFocus
SetDlgItemInt
GetSystemMetrics
GetWindowTextLengthA
GetCapture
GetMenuItemCount
EnumDesktopsA
DestroyCursor
GetClassInfoExA
UpdateLayeredWindow
MonitorFromWindow
FrameRect
EnumChildWindows
FindWindowA
LoadBitmapW
RegisterClassExA
CloseWindow
IsMenu
MessageBeep
AdjustWindowRect
EnumDesktopWindows
DeleteMenu
MonitorFromRect
IsWindow

gdi32

ExtFloodFill
ExtEscape
EqualRgn
CopyEnhMetaFileW
SetPixelFormat
ResetDCW
CreatePolygonRgn
CreateDCA
SetTextJustification
GetKerningPairsA
GetDCPenColor
SetPaletteEntries
AbortPath
CreatePolyPolygonRgn
GetBkMode

advapi32

RegOpenKeyA
RegQueryValueW
RegReplaceKeyW
RegCreateKeyExW
RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW
AddPortExW
ScheduleJob
PrinterProperties
XcvDataW
FindNextPrinterChangeNotification
EnumPrintProcessorDatatypesW
SetPortA
ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx
WSASetBlockingHook
shutdown

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oqngCF
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.N
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LUV
Size: 1024B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOTYM
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AGbvFQ
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kkPQAu
Size: 512B - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

Sections

.text Size: 12KB - Virtual size: 12KB

.oqngCF Size: 1KB - Virtual size: 19KB

.N Size: 4KB - Virtual size: 15KB

.LUV Size: 1024B - Virtual size: 31KB

.GOTYM Size: 2KB - Virtual size: 21KB

.data Size: 10KB - Virtual size: 9KB

.AGbvFQ Size: 2KB - Virtual size: 9KB

.kkPQAu Size: 512B - Virtual size: 253KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.oqngCF
Size: 1KB - Virtual size: 19KB

.N
Size: 4KB - Virtual size: 15KB

.LUV
Size: 1024B - Virtual size: 31KB

.GOTYM
Size: 2KB - Virtual size: 21KB

.data
Size: 10KB - Virtual size: 9KB

.AGbvFQ
Size: 2KB - Virtual size: 9KB

.kkPQAu
Size: 512B - Virtual size: 253KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB