NEAS[.]66840ecbea1e3c93f5c6a856ac5d03b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.66840ecbea1e3c93f5c6a856ac5d03b0.exe
Size

604KB
MD5

66840ecbea1e3c93f5c6a856ac5d03b0
SHA1

93545da25b86888fd1a2a10fe05723e632aa465b
SHA256

69cb39be453ac65c4f5c9745077e20d814713c50861f667a9aa495dd61422ed0
SHA512

55ed9be010d2998bfaf5ce41b819dfbe345e7d4b6b57eca6245ffe202fd14f24577224f3a1a4f4d679d1d886344c2323535b4526843ec888f5acc3447827de64
SSDEEP

12288:lxOQMLf8Tku9GQXPYv1yEN/j7j26YAUt5ZLM:lxOQdTku9fPYv1ZN/jW6YXt5ZLM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.66840ecbea1e3c93f5c6a856ac5d03b0.exe

Files

NEAS.66840ecbea1e3c93f5c6a856ac5d03b0.exe
.dll windows:4 windows x64

4cb803041b1fe5d5c49a50b1961cac83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

dxgi

CreateDXGIFactory1
DXGID3D10CreateDevice
DXGID3D10RegisterLayers

kernel32

DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_assert
_strdup
_stricmp
free
fwrite
getenv
memcmp
memcpy
memmove
memset
strchr
strcmp
strcpy
strcspn
strlen

wined3d

wined3d_blend_state_create
wined3d_blend_state_decref
wined3d_blend_state_get_parent
wined3d_blend_state_incref
wined3d_buffer_create
wined3d_buffer_decref
wined3d_buffer_get_parent
wined3d_buffer_get_resource
wined3d_buffer_incref
wined3d_check_device_format
wined3d_check_device_multisample_type
wined3d_command_list_decref
wined3d_deferred_context_create
wined3d_deferred_context_destroy
wined3d_deferred_context_record_command_list
wined3d_depth_stencil_state_create
wined3d_depth_stencil_state_decref
wined3d_depth_stencil_state_get_parent
wined3d_depth_stencil_state_incref
wined3d_device_context_clear_rendertarget_view
wined3d_device_context_clear_uav_float
wined3d_device_context_clear_uav_uint
wined3d_device_context_copy_resource
wined3d_device_context_copy_sub_resource_region
wined3d_device_context_copy_uav_counter
wined3d_device_context_dispatch
wined3d_device_context_dispatch_indirect
wined3d_device_context_draw
wined3d_device_context_draw_indexed
wined3d_device_context_draw_indirect
wined3d_device_context_execute_command_list
wined3d_device_context_flush
wined3d_device_context_generate_mipmaps
wined3d_device_context_get_blend_state
wined3d_device_context_get_constant_buffer
wined3d_device_context_get_depth_stencil_state
wined3d_device_context_get_depth_stencil_view
wined3d_device_context_get_index_buffer
wined3d_device_context_get_predication
wined3d_device_context_get_primitive_type
wined3d_device_context_get_rasterizer_state
wined3d_device_context_get_rendertarget_view
wined3d_device_context_get_sampler
wined3d_device_context_get_scissor_rects
wined3d_device_context_get_shader
wined3d_device_context_get_shader_resource_view
wined3d_device_context_get_stream_output
wined3d_device_context_get_stream_source
wined3d_device_context_get_unordered_access_view
wined3d_device_context_get_vertex_declaration
wined3d_device_context_get_viewports
wined3d_device_context_issue_query
wined3d_device_context_map
wined3d_device_context_reset_state
wined3d_device_context_resolve_sub_resource
wined3d_device_context_set_blend_state
wined3d_device_context_set_constant_buffers
wined3d_device_context_set_depth_stencil_state
wined3d_device_context_set_index_buffer
wined3d_device_context_set_predication
wined3d_device_context_set_primitive_type
wined3d_device_context_set_rasterizer_state
wined3d_device_context_set_render_targets_and_unordered_access_views
wined3d_device_context_set_samplers
wined3d_device_context_set_scissor_rects
wined3d_device_context_set_shader
wined3d_device_context_set_shader_resource_views
wined3d_device_context_set_state
wined3d_device_context_set_stream_outputs
wined3d_device_context_set_stream_sources
wined3d_device_context_set_unordered_access_views
wined3d_device_context_set_vertex_declaration
wined3d_device_context_set_viewports
wined3d_device_context_unmap
wined3d_device_context_update_sub_resource
wined3d_device_decref
wined3d_device_get_creation_parameters
wined3d_device_get_device_caps
wined3d_device_get_immediate_context
wined3d_device_get_state
wined3d_device_get_wined3d
wined3d_device_incref
wined3d_extract_shader_input_signature_from_dxbc
wined3d_get_adapter
wined3d_mutex_lock
wined3d_mutex_unlock
wined3d_query_create
wined3d_query_decref
wined3d_query_get_data
wined3d_query_get_data_size
wined3d_query_get_parent
wined3d_query_incref
wined3d_query_issue
wined3d_rasterizer_state_create
wined3d_rasterizer_state_decref
wined3d_rasterizer_state_get_parent
wined3d_rasterizer_state_incref
wined3d_rendertarget_view_create
wined3d_rendertarget_view_decref
wined3d_rendertarget_view_get_parent
wined3d_rendertarget_view_incref
wined3d_resource_get_desc
wined3d_resource_map
wined3d_resource_unmap
wined3d_sampler_create
wined3d_sampler_decref
wined3d_sampler_get_parent
wined3d_sampler_incref
wined3d_shader_create_cs
wined3d_shader_create_ds
wined3d_shader_create_gs
wined3d_shader_create_hs
wined3d_shader_create_ps
wined3d_shader_create_vs
wined3d_shader_decref
wined3d_shader_get_parent
wined3d_shader_incref
wined3d_shader_resource_view_create
wined3d_shader_resource_view_decref
wined3d_shader_resource_view_get_parent
wined3d_shader_resource_view_incref
wined3d_state_create
wined3d_state_destroy
wined3d_state_get_feature_level
wined3d_texture_create
wined3d_texture_decref
wined3d_texture_get_resource
wined3d_texture_incref
wined3d_unordered_access_view_create
wined3d_unordered_access_view_decref
wined3d_unordered_access_view_get_parent
wined3d_unordered_access_view_incref
wined3d_vertex_declaration_create
wined3d_vertex_declaration_decref
wined3d_vertex_declaration_get_parent
wined3d_vertex_declaration_incref

Exports

Exports

D3D11CoreCreateDevice
D3D11CoreCreateLayeredDevice
D3D11CoreGetLayeredDeviceSize
D3D11CoreRegisterLayers
D3D11CreateDevice
D3D11CreateDeviceAndSwapChain
D3D11On12CreateDevice
D3DKMTCheckVidPnExclusiveOwnership
D3DKMTCloseAdapter
D3DKMTCreateAllocation
D3DKMTCreateContext
D3DKMTCreateDevice
D3DKMTCreateSynchronizationObject
D3DKMTDestroyAllocation
D3DKMTDestroyContext
D3DKMTDestroyDevice
D3DKMTDestroySynchronizationObject
D3DKMTEscape
D3DKMTGetContextSchedulingPriority
D3DKMTGetDeviceState
D3DKMTGetDisplayModeList
D3DKMTGetMultisampleMethodList
D3DKMTGetRuntimeData
D3DKMTGetSharedPrimaryHandle
D3DKMTLock
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTOpenAdapterFromHdc
D3DKMTOpenResource
D3DKMTPresent
D3DKMTQueryAdapterInfo
D3DKMTQueryAllocationResidency
D3DKMTQueryResourceInfo
D3DKMTRender
D3DKMTSetAllocationPriority
D3DKMTSetContextSchedulingPriority
D3DKMTSetDisplayMode
D3DKMTSetDisplayPrivateDriverFormat
D3DKMTSetGammaRamp
D3DKMTSetVidPnSourceOwner
D3DKMTSignalSynchronizationObject
D3DKMTUnlock
D3DKMTWaitForSynchronizationObject
D3DKMTWaitForVerticalBlankEvent
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 384B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cb803041b1fe5d5c49a50b1961cac83

Headers

DLL Characteristics

File Characteristics

Imports

dxgi

kernel32

ntdll

ucrtbase

wined3d

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 185KB

.data Size: 4KB - Virtual size: 272B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 100KB - Virtual size: 99KB

.pdata Size: 12KB - Virtual size: 9KB

.xdata Size: 12KB - Virtual size: 10KB

.bss Size: - Virtual size: 384B

.edata Size: 64KB - Virtual size: 62KB

.idata Size: 12KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 188KB - Virtual size: 185KB

.data
Size: 4KB - Virtual size: 272B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 100KB - Virtual size: 99KB

.pdata
Size: 12KB - Virtual size: 9KB

.xdata
Size: 12KB - Virtual size: 10KB

.bss
Size: - Virtual size: 384B

.edata
Size: 64KB - Virtual size: 62KB

.idata
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 4KB - Virtual size: 1KB