NEAS[.]23f7ad4213d6f5ffe98d1d5cd1969d90[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.23f7ad4213d6f5ffe98d1d5cd1969d90.exe
Size

628KB
MD5

23f7ad4213d6f5ffe98d1d5cd1969d90
SHA1

ffa37a1d7775cdf13fc41a352d5814e4791454fd
SHA256

a436f94cfdd08c0e36a600a393895456f60aa04ad2ed63bfbd89aa3daf05deb9
SHA512

079aef33af1a561df318defda6a98f74ee96a16551b49bf8a5b6c061e088012c9afc4c4e3ef48622340d96ff45396bea71b74784a791213b7aaecae641b1bf7a
SSDEEP

12288:Ve9eaoWqcEcA9H697Ejd5FyFxOny+/dbvP:EevWfEcA+EjlyT6Ndbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.23f7ad4213d6f5ffe98d1d5cd1969d90.exe

Files

NEAS.23f7ad4213d6f5ffe98d1d5cd1969d90.exe
.exe windows:4 windows x86

1d5e0612ed5f227afc53ab21be5d2a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcesses
EnumDeviceDrivers
GetDeviceDriverBaseNameA

kernel32

GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
SetStdHandle
VirtualAlloc
SetHandleCount
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
SetEnvironmentVariableA
HeapAlloc
HeapFree
GetFileTime
GetFileAttributesA
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
FindResourceExA
CopyFileA
FormatMessageA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
MulDiv
SetLastError
InterlockedDecrement
WritePrivateProfileStringA
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
lstrcpynA
GetModuleHandleA
FreeResource
GlobalFree
VirtualProtect
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
LocalFree
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
ReadFile
IsBadCodePtr
GetCurrentProcessId
OpenProcess
TerminateProcess
Sleep
IsDBCSLeadByte
MultiByteToWideChar
GetLastError
DeviceIoControl
GetFileSize
WriteFile
lstrcmpA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
lstrcpyA
GetLogicalDriveStringsA
GetDriveTypeA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentProcess
GetVersionExA
SetUnhandledExceptionFilter
OpenMutexA
ExitProcess
CreateMutexA
CreateFileA
CloseHandle
GetSystemDirectoryA
lstrcatA
GetTickCount
OpenFile
DeleteFileA
LoadLibraryA
GetProcAddress
GetFileType

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
LoadCursorA
GetSysColorBrush
IsClipboardFormatAvailable
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
DestroyMenu
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
EnableWindow
MessageBoxA
ExitWindowsEx
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
LoadIconA
GetSystemMetrics
wsprintfA
SetWindowLongA
SetForegroundWindow
IsWindowVisible
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetWindow
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
MapDialogRect
SetWindowPos
ShowWindow
GetCapture
GetActiveWindow
GetAsyncKeyState
GetFocus
SetFocus
PostMessageA
GetDlgItem
IsWindowEnabled
UnregisterClassA
CharUpperA
PostThreadMessageA
GetWindowTextA
GetWindowLongA
PtInRect
FillRect
DrawTextA
EnableMenuItem
GetSubMenu
DragDetect
RedrawWindow
SetCapture
CreateCaret
SetCaretPos
ShowCaret
DestroyCaret
EnableScrollBar
SetScrollInfo
ReleaseCapture
RegisterClipboardFormatA
EmptyClipboard
GetSysColor
SetScrollPos
GetKeyState
CreatePopupMenu
InsertMenuItemA
UpdateWindow
GetParent
GetCursorPos
SetActiveWindow
GetDC
LoadBitmapA

gdi32

GetMapMode
GetRgnBox
GetTextColor
GetBkColor
EnumFontFamiliesExA
CopyMetaFileA
CreateRectRgnIndirect
GetDeviceCaps
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
RectVisible
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SetBoundsRect
GetCharWidthA
GetTextExtentPoint32A
TextOutA
BitBlt
SelectObject
PtVisible

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ControlService
ChangeServiceConfigA
QueryServiceStatus
StartServiceA
CreateServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegRestoreKeyA
RegSaveKeyA
RegEnumValueA
RegQueryValueExA
GetUserNameA
LookupAccountNameA

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
OleGetClipboard
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoRegisterMessageFilter
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleSetClipboard
CreateStreamOnHGlobal

oleaut32

SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

ws2_32

htonl
htons

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d5e0612ed5f227afc53ab21be5d2a15

Headers

File Characteristics

Imports

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 220KB - Virtual size: 218KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 136KB - Virtual size: 350KB

.rsrc Size: 164KB - Virtual size: 163KB

.rsrc Size: 40KB - Virtual size: 40KB

.text
Size: 220KB - Virtual size: 218KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 136KB - Virtual size: 350KB

.rsrc
Size: 164KB - Virtual size: 163KB

.rsrc
Size: 40KB - Virtual size: 40KB