NEAS[.]678f8fc172e4966c60e8ad641d1f8370[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.678f8fc172e4966c60e8ad641d1f8370.exe
Size

6.1MB
MD5

678f8fc172e4966c60e8ad641d1f8370
SHA1

52d805aad45379b508ae5fa50252b9bea244e5ea
SHA256

5bf7564bbe4ae708402312960926254dd7b99085dfbbb14ee12130efca1263ba
SHA512

23b8b76828837de488f5b295853267f31f86c6767ac4ef9349df61996e30ed55c5af3cc77520caaa2838525df82c26be4cf2bba1e27f124282c09f8e27e4ea91
SSDEEP

196608:3PyzU1I8cKrYlynWktlikzX3cH4EN1n2fYih3G:36o1I8cWFHnnqVNF2wo3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.678f8fc172e4966c60e8ad641d1f8370.exe

Files

NEAS.678f8fc172e4966c60e8ad641d1f8370.exe
.dll windows:6 windows x86

a7820513078d90d264ff2fc1ab680b64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsW
UnmapViewOfFile
InitializeSListHead
GetModuleHandleExW
WaitForSingleObjectEx
GetSystemInfo
CreateEventW
VirtualProtect
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
GetCurrentProcessId
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStdHandle
HeapSize
ExitProcess
GetProcessHeap
IsDebuggerPresent
EnumSystemLocalesW
TlsAlloc
GetModuleFileNameA
QueryDosDeviceW
GetExitCodeThread
GetFileType
CreateNamedPipeA
GetPrivateProfileIntW
MultiByteToWideChar
GetModuleFileNameW
SetCommTimeouts
VirtualQueryEx
SetCommState
SetCommBreak
HeapFree
EnumCalendarInfoW
GetSystemDefaultUILanguage
CloseHandle
GetCommandLineW
HeapCreate
GlobalMemoryStatus
ReadFile
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
GetLastError
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW

user32

GetWindowTextLengthA
CharLowerBuffW
GetMessageA
SendDlgItemMessageA
DrawIconEx
DeleteMenu
SetParent
SetFocus
ModifyMenuW
ShowCaret
SetRect
GetWindowLongW
SystemParametersInfoW
RemoveMenu
FlashWindow
SetCaretPos
GetDlgCtrlID
DrawFrameControl
CheckMenuItem
LoadStringA
RemovePropA
GetMenuItemInfoW
CreateDialogIndirectParamA
SetPropA
MessageBoxA
EnableMenuItem
GetSystemMetrics
SetDlgItemTextW
EnableScrollBar

gdi32

MoveToEx
GetWindowOrgEx
GetEnhMetaFileHeader
GetCharABCWidthsW
CreatePatternBrush
SetWinMetaFileBits
CloseEnhMetaFile
TextOutA
LineTo
SelectObject
PlayEnhMetaFile

advapi32

OpenProcessToken
SetSecurityDescriptorDacl
EqualSid
CloseServiceHandle
RegEnumKeyExW
GetLengthSid
SetSecurityDescriptorOwner
InitializeSecurityDescriptor

oleaut32

VariantInit
VariantCopy

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.6MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7820513078d90d264ff2fc1ab680b64

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

Sections

.text Size: 445KB - Virtual size: 444KB

.data Size: 5.6MB - Virtual size: 5.7MB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 445KB - Virtual size: 444KB

.data
Size: 5.6MB - Virtual size: 5.7MB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 11KB - Virtual size: 11KB