NEAS[.]97aeaaeb07b734482e7b234ff8acaf00[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.97aeaaeb07b734482e7b234ff8acaf00.exe
Size

209KB
MD5

97aeaaeb07b734482e7b234ff8acaf00
SHA1

9d40a3c7880d7050b530b1911cfd12c05273f360
SHA256

95e12ded95c53292f2ebc290b07916fe9396becf84cd1807e9710d676417a4c5
SHA512

52da38ca219a55f15eb3a73ea56e6e6c7dd1f4841d3fa7ce85ddddd918413e6018c5838e1e7a3af01616fc5876cc9095066e30d9d4b8275931d433259b0a91c3
SSDEEP

6144:LOB8K/S3r3FfK3yDrjQVEzUIVhK+2aZyRO:LBKKzFfKCbQVEzNz4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.97aeaaeb07b734482e7b234ff8acaf00.exe

Files

NEAS.97aeaaeb07b734482e7b234ff8acaf00.exe
.exe windows:4 windows x86

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetModuleHandleA
GetTempFileNameA
GetNumberFormatW
ExpandEnvironmentStringsA
GetMailslotInfo
GetExitCodeProcess
FindResourceW
GetModuleFileNameW
GetProcAddress
ConnectNamedPipe
CreateFileMappingW
Beep
lstrlenW
CreateThread
GetHandleInformation
SetLocaleInfoA
SetThreadPriority
GetLogicalDriveStringsW
GetLastError
GetSystemTime
CreateMailslotA
OpenSemaphoreW
GetFullPathNameA
GlobalAlloc
QueryPerformanceCounter
OpenSemaphoreA
CreateSemaphoreW
GetVersionExA
SetCurrentDirectoryA
MulDiv
GetStringTypeA
GetFileType
lstrcpyA
GlobalGetAtomNameA
SetPriorityClass
GetStartupInfoW
InitializeCriticalSection
GetFileAttributesA
CreateMutexW
GetEnvironmentVariableW
GetFullPathNameW
ExitThread
GetTempPathW

user32

SetWindowLongA
GetDC
TrackPopupMenu
CharNextA
AnimateWindow
CopyImage
AppendMenuW
wsprintfA
CreateDesktopA
SetCapture
GetIconInfo
LoadBitmapA
GetClassNameW
IsChild
SetCursor
CreateDesktopW
GetDlgItem
GetMenuItemRect
GetClientRect
GetMenuItemInfoA
BringWindowToTop
UpdateWindow
MonitorFromRect
UpdateLayeredWindow
LoadIconW
IsWindowEnabled
LoadCursorA
OpenClipboard
GetMessageW
DefWindowProcA
RemoveMenu

gdi32

EndPath
CreatePatternBrush
UpdateColors
GetCharacterPlacementW
GetGlyphIndicesW
GetObjectType
CreateDCA
GetMetaFileA

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetDataFromIDListW
SHGetFolderLocation
SHCreateDirectory
SHGetFolderPathW
StrRStrA
StrRStrW

ole32

CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateInstanceEx
CoInitializeEx
OleInitialize
OleCreate
CoFileTimeNow

oleaut32

SafeArrayPutElement
VarR8FromDisp
VarI4FromUI4

setupapi

pSetupGuidFromString
SetupDiDeleteDeviceInfo
SetupScanFileQueueA
SetupDiGetClassDevPropertySheetsW
SetupDiClassGuidsFromNameExA

ws2_32

htonl
gethostbyaddr
setsockopt
getnameinfo
getservbyport
htons
WSACreateEvent
sendto

inetcomm

MimeOleCreateHeaderTable
CreateSMTPTransport
MimeOleSMimeCapRelease
MimeOleSetPropW
MimeOleCreateByteStream
EssSignCertificateEncodeEx
MimeOleParseRfc822AddressW
MimeOleSetBodyPropA
EssReceiptRequestDecodeEx
EssReceiptEncodeEx
HrGetDisplayNameWithSizeForFile

crypt32

CertGetStoreProperty
CertUnregisterSystemStore
I_CertSrvProtectFunction
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertAddCRLLinkToStore
CryptHashMessage
RegDeleteValueU
CryptMsgGetAndVerifySigner
CryptVerifySignatureU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cKhu
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AqeNl
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Dv
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NEEiJj
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RD
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MM
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VvQw
Size: 1KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

setupapi

ws2_32

inetcomm

crypt32

Sections

.text Size: 12KB - Virtual size: 11KB

.cKhu Size: 2KB - Virtual size: 36KB

.AqeNl Size: 4KB - Virtual size: 20KB

.G Size: 1KB - Virtual size: 29KB

.Dv Size: 2KB - Virtual size: 31KB

.NEEiJj Size: 1KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 5KB

.RD Size: 1024B - Virtual size: 11KB

.R Size: 1024B - Virtual size: 4KB

.MM Size: 2KB - Virtual size: 25KB

.VvQw Size: 1KB - Virtual size: 179KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.cKhu
Size: 2KB - Virtual size: 36KB

.AqeNl
Size: 4KB - Virtual size: 20KB

.G
Size: 1KB - Virtual size: 29KB

.Dv
Size: 2KB - Virtual size: 31KB

.NEEiJj
Size: 1KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 5KB

.RD
Size: 1024B - Virtual size: 11KB

.R
Size: 1024B - Virtual size: 4KB

.MM
Size: 2KB - Virtual size: 25KB

.VvQw
Size: 1KB - Virtual size: 179KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1KB - Virtual size: 1KB