NEAS[.]356ad55bf3fa227f3433f47a5eb82130[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.356ad55bf3fa227f3433f47a5eb82130.exe
Size

209KB
MD5

356ad55bf3fa227f3433f47a5eb82130
SHA1

e2799a8b11c4383273bc6d1bda6c1d141acfddac
SHA256

6ce0632667105efee6ba8b76f3d152cdd9394e570aae3bb0272b8517f019d682
SHA512

0829e93d2bb512e4d3bb452f21d3dfd1acc5e5ec8a4da765850c75214febfadffb31c6c30baddec19f9247de534e99f8ab58a1360338e0ac37e54ca316c0745b
SSDEEP

6144:GOB8K/S3r3FfK3yDrjQVEzUIVhK+2aZyRO:GBKKzFfKCbQVEzNz4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.356ad55bf3fa227f3433f47a5eb82130.exe

Files

NEAS.356ad55bf3fa227f3433f47a5eb82130.exe
.exe windows:4 windows x86

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetModuleHandleA
GetTempFileNameA
GetNumberFormatW
ExpandEnvironmentStringsA
GetMailslotInfo
GetExitCodeProcess
FindResourceW
GetModuleFileNameW
GetProcAddress
ConnectNamedPipe
CreateFileMappingW
Beep
lstrlenW
CreateThread
GetHandleInformation
SetLocaleInfoA
SetThreadPriority
GetLogicalDriveStringsW
GetLastError
GetSystemTime
CreateMailslotA
OpenSemaphoreW
GetFullPathNameA
GlobalAlloc
QueryPerformanceCounter
OpenSemaphoreA
CreateSemaphoreW
GetVersionExA
SetCurrentDirectoryA
MulDiv
GetStringTypeA
GetFileType
lstrcpyA
GlobalGetAtomNameA
SetPriorityClass
GetStartupInfoW
InitializeCriticalSection
GetFileAttributesA
CreateMutexW
GetEnvironmentVariableW
GetFullPathNameW
ExitThread
GetTempPathW

user32

SetWindowLongA
GetDC
TrackPopupMenu
CharNextA
AnimateWindow
CopyImage
AppendMenuW
wsprintfA
CreateDesktopA
SetCapture
GetIconInfo
LoadBitmapA
GetClassNameW
IsChild
SetCursor
CreateDesktopW
GetDlgItem
GetMenuItemRect
GetClientRect
GetMenuItemInfoA
BringWindowToTop
UpdateWindow
MonitorFromRect
UpdateLayeredWindow
LoadIconW
IsWindowEnabled
LoadCursorA
OpenClipboard
GetMessageW
DefWindowProcA
RemoveMenu

gdi32

EndPath
CreatePatternBrush
UpdateColors
GetCharacterPlacementW
GetGlyphIndicesW
GetObjectType
CreateDCA
GetMetaFileA

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetDataFromIDListW
SHGetFolderLocation
SHCreateDirectory
SHGetFolderPathW
StrRStrA
StrRStrW

ole32

CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateInstanceEx
CoInitializeEx
OleInitialize
OleCreate
CoFileTimeNow

oleaut32

SafeArrayPutElement
VarR8FromDisp
VarI4FromUI4

setupapi

pSetupGuidFromString
SetupDiDeleteDeviceInfo
SetupScanFileQueueA
SetupDiGetClassDevPropertySheetsW
SetupDiClassGuidsFromNameExA

ws2_32

htonl
gethostbyaddr
setsockopt
getnameinfo
getservbyport
htons
WSACreateEvent
sendto

inetcomm

MimeOleCreateHeaderTable
CreateSMTPTransport
MimeOleSMimeCapRelease
MimeOleSetPropW
MimeOleCreateByteStream
EssSignCertificateEncodeEx
MimeOleParseRfc822AddressW
MimeOleSetBodyPropA
EssReceiptRequestDecodeEx
EssReceiptEncodeEx
HrGetDisplayNameWithSizeForFile

crypt32

CertGetStoreProperty
CertUnregisterSystemStore
I_CertSrvProtectFunction
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertAddCRLLinkToStore
CryptHashMessage
RegDeleteValueU
CryptMsgGetAndVerifySigner
CryptVerifySignatureU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cKhu
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AqeNl
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Dv
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NEEiJj
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RD
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MM
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VvQw
Size: 1KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

setupapi

ws2_32

inetcomm

crypt32

Sections

.text Size: 12KB - Virtual size: 11KB

.cKhu Size: 2KB - Virtual size: 36KB

.AqeNl Size: 4KB - Virtual size: 20KB

.G Size: 1KB - Virtual size: 29KB

.Dv Size: 2KB - Virtual size: 31KB

.NEEiJj Size: 1KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 5KB

.RD Size: 1024B - Virtual size: 11KB

.R Size: 1024B - Virtual size: 4KB

.MM Size: 2KB - Virtual size: 25KB

.VvQw Size: 1KB - Virtual size: 179KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.cKhu
Size: 2KB - Virtual size: 36KB

.AqeNl
Size: 4KB - Virtual size: 20KB

.G
Size: 1KB - Virtual size: 29KB

.Dv
Size: 2KB - Virtual size: 31KB

.NEEiJj
Size: 1KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 5KB

.RD
Size: 1024B - Virtual size: 11KB

.R
Size: 1024B - Virtual size: 4KB

.MM
Size: 2KB - Virtual size: 25KB

.VvQw
Size: 1KB - Virtual size: 179KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1KB - Virtual size: 1KB