NEAS[.]18c8319427a3265995752db6fdda8a50[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.18c8319427a3265995752db6fdda8a50.exe
Size

4.4MB
MD5

18c8319427a3265995752db6fdda8a50
SHA1

63b83755ffb10701f71a8d2d9ea54ab744a01973
SHA256

b1c0685a5bfdc6d46ea0395fadc6bfcb61de633c71587e5f68dc760be3bd9813
SHA512

9baa89786ac764482361fded99828aa2642f3ff013f9f584b374c846ab0eb4cc7f4b0002afc725e26bc52982d9111091dc6fc105548804eca74342f7c94fb73c
SSDEEP

98304:zoRuw9+HqMAIVRQGElRbL1DeIRuOd4qsq:ze3+HqMfQGM/b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.18c8319427a3265995752db6fdda8a50.exe

Files

NEAS.18c8319427a3265995752db6fdda8a50.exe
.exe windows:4 windows x86

9660188ca44fadcb8f8bd1b18aa300bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetCloseEnum

comctl32

InitCommonControlsEx

kernel32

GetCPInfo
GetCurrentThread
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTimeZoneInformation
GetVersionExA
GetVersionExW
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
GetConsoleOutputCP
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
OpenProcess
RaiseException
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WritePrivateProfileStringW
GetConsoleCP
GetACP
FreeResource
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumResourceLanguagesW
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateMutexW
CreateFileW
CreateFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryA
GetProcAddress
GetCommandLineW
GetConsoleMode
ReadFile
WriteFile
HeapReAlloc

user32

IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadMenuW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetPropW
SetRect
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
VkKeyScanA
IsRectEmpty
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetKeyboardType
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
CharNextW
GetActiveWindow
FindWindowW
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DestroyWindow
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
CharUpperW
CheckMenuItem
ClientToScreen
CopyAcceleratorTableW
CopyRect
CreateDialogIndirectParamW
CreateWindowExW
DefWindowProcW
DestroyMenu
InvalidateRect
IntersectRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowPlacement
GetWindowRect
GetMenu

gdi32

SetMapMode
SetTextColor
ScaleWindowExtEx
SetViewportOrgEx
SetWindowExtEx
SetBkColor
ScaleViewportExtEx
SaveDC
RestoreDC
RectVisible
PtVisible
TextOutW
SelectObject
CreateRectRgnIndirect
SetViewportExtEx
CreateBitmap
GetWindowExtEx
GetViewportExtEx
GetTextColor
GetStockObject
GetRgnBox
GetObjectW
GetMapMode
GetDeviceCaps
GetClipBox
GetBkColor
ExtTextOutW
ExtSelectClipRgn
Escape
DeleteObject
DeleteDC
OffsetViewportOrgEx

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetFileTitleW

advapi32

RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

CommandLineToArgvW
ShellExecuteExW
Shell_NotifyIconW

ole32

OleFlushClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromIID
CoRevokeClassObject

shlwapi

PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathAddBackslashW
PathFindExtensionW

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_except_handler3
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__setusermatherr

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.btls7
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dad1026
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9660188ca44fadcb8f8bd1b18aa300bc

Headers

File Characteristics

Imports

mpr

comctl32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 4.0MB

.btls7 Size: 8KB - Virtual size: 4KB

.rsrc Size: 288KB - Virtual size: 284KB

dad1026 Size: 1.8MB - Virtual size: 1.8MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 4.0MB

.btls7
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 288KB - Virtual size: 284KB

dad1026
Size: 1.8MB - Virtual size: 1.8MB