NEAS[.]223cb93a43aef5aa061dad13d1f7b7b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.223cb93a43aef5aa061dad13d1f7b7b0.exe
Size

175KB
MD5

223cb93a43aef5aa061dad13d1f7b7b0
SHA1

49b8bed46f09d4a23d8ea522d4e53bdfb86c2f74
SHA256

b50ca8edda56436fba64b2b0d2cb47fcbf97bbca6148822cc40f1221b1f99898
SHA512

27eff4db6af5b50b53586ea32a8566aea788e39a0eae27b32f18aad28ad4288eda395f15315618ff89cc1778f271626fab007f0e39f57480db4b6105ec820722
SSDEEP

3072:1fw0L6NsYqg9QYJvxbSHw+0J1M6MKvHB0FX7sdv+bs9UEB/zK9bzsNOVc517EN/w:asYrQixWHh0J1M6MKvHB0FX7sdv+bs9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.223cb93a43aef5aa061dad13d1f7b7b0.exe

Files

NEAS.223cb93a43aef5aa061dad13d1f7b7b0.exe
.exe windows:4 windows x86

617c89cd6b32094f43b7feaaa1495a7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LocalUnlock
lstrcpynA
WinExec
SetCurrentDirectoryA
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalAddAtomA
GlobalFindAtomA
LocalHandle
CloseHandle
FlushFileBuffers
WriteFile
GetLastError
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
TerminateProcess
lstrlenA
GlobalAlloc
GetWindowsDirectoryA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
GlobalFree
GetVersionExA
GetPrivateProfileIntA
LocalAlloc
LocalLock
lstrcpyA
GetPrivateProfileStringA
GetModuleFileNameA
GlobalLock
FreeEnvironmentStringsA
GetCurrentProcess
UnhandledExceptionFilter
GlobalUnlock
lstrcmpiA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

ShowWindow
PostMessageA
GetWindowRect
GetDesktopWindow
RegisterClassA
RegisterClassExA
UpdateWindow
LoadImageA
LoadCursorA
LoadIconA
LoadStringA
SetWindowPos
ReleaseDC
GetDC
DialogBoxParamA
WinHelpA
wsprintfA
SetDlgItemTextA
GetDlgItemTextA
GetWindow
EndDialog
DefMDIChildProcA
DefFrameProcA
DefDlgProcA
DefWindowProcA
KillTimer
ReleaseCapture
SetCursor
SetCapture
GetCapture
SetFocus
SendMessageA
LoadAcceleratorsA
InsertMenuA
ModifyMenuA
DeleteMenu
GetSubMenu
LoadMenuA
CallNextHookEx
SetWindowsHookExA
GetWindowThreadProcessId
AppendMenuA
EnableMenuItem
GetSystemMenu
PostQuitMessage
IsIconic
SetWindowTextA
ScreenToClient
SetTimer
MessageBeep
DestroyWindow
SetWindowLongA
GetWindowLongA
SetCursorPos
GetCursorPos
SetForegroundWindow
CheckMenuItem
InsertMenuItemA
CreatePopupMenu
GetClientRect
DestroyIcon
FindWindowExA
TranslateAcceleratorA
TranslateMessage
DestroyMenu
TrackPopupMenuEx
DispatchMessageA
FindWindowA
GetMessageA
CreateWindowExA

gdi32

GetDeviceCaps

winspool.drv

ScheduleJob
AddJobA
OpenPrinterA
GetPrinterA
DocumentPropertiesA
SetPrinterA
ClosePrinter

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

comctl32

ord17
ord6
CreateToolbarEx

shell32

Shell_NotifyIconA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

617c89cd6b32094f43b7feaaa1495a7c

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

winspool.drv

version

comctl32

shell32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 15KB - Virtual size: 23KB

.rsrc Size: 119KB - Virtual size: 120KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 15KB - Virtual size: 23KB

.rsrc
Size: 119KB - Virtual size: 120KB