NEAS[.]a68d73bd9ff84aaea936633e4d4e4250[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a68d73bd9ff84aaea936633e4d4e4250.exe
Size

1.5MB
MD5

a68d73bd9ff84aaea936633e4d4e4250
SHA1

91dce348fbe5ee9f1801f64f926febc11b2762be
SHA256

8c8d09257172c5fceb5c4abf7aa1cdb2ccca35685d6e76b71f24b1e440c57521
SHA512

452f4a0cf1bbc5ae3c6e11357dcbdb9670abd521c278505a1b3580dd8a67fb444bb04120d1e5512b8ee5d7ed91a471c3fd66243b1504accc061ca3ec02081d98
SSDEEP

24576:0+0XhH2BAwbNRlcpLmtLmd/RA0R0IR03LmJRsORysRy9Uxn+Fb2NRV8FkPgp6gpu:X8TAUNoV70aEmTSVQ7xuJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a68d73bd9ff84aaea936633e4d4e4250.exe

Files

NEAS.a68d73bd9ff84aaea936633e4d4e4250.exe
.exe windows:5 windows x86

082396d7c869ccf148a4875852c6e33f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitThread
DeleteCriticalSection
ResumeThread
SetThreadPriority
CreateThread
WideCharToMultiByte
lstrcpyW
InitializeCriticalSection
HeapAlloc
lstrcatA
lstrcpyA
SetEvent
HeapReAlloc
GlobalUnlock
GlobalLock
GlobalSize
GlobalFree
GlobalAlloc
QueryPerformanceCounter
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
ReadFile
SetCurrentDirectoryA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
MultiByteToWideChar
GetTempFileNameA
GetTempPathA
GetExitCodeThread
OutputDebugStringA
GetFileSize
ExitProcess
GetVersionExA
GetSystemInfo
GetOEMCP
QueryPerformanceFrequency
GlobalMemoryStatus
lstrlenW
DeleteFileW
WaitForMultipleObjects
GetThreadPriority
GetCurrentThread
GetTickCount
lstrcmpW
MulDiv
lstrcpynW
InterlockedIncrement
GetLastError
InterlockedDecrement
SetFilePointer
ReleaseSemaphore
VirtualAlloc
VirtualFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
EncodePointer
DecodePointer
GetModuleHandleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
IsValidCodePage
HeapSize
FlushFileBuffers
LoadLibraryW
LCMapStringW
SetStdHandle
WriteConsoleW
GetStringTypeW
CreateFileW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
CreateFileA
WriteFile
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
WaitForSingleObject
ResetEvent
GetCurrentThreadId
CreateEventA
CloseHandle
lstrcmpA
LoadLibraryA
lstrlenA
FreeLibrary
GetProcessHeap
HeapFree
GetProcAddress
CreateSemaphoreA
Sleep

user32

IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
EmptyClipboard
SetWindowRgn
SendMessageA
GetMenuItemInfoA
GetMenuItemCount
PostMessageA
ShowCursor
GetCursorPos
SetWindowPos
SetForegroundWindow
SystemParametersInfoA
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
DrawMenuBar
SetMenu
SetActiveWindow
AdjustWindowRectEx
SetWindowLongA
ClientToScreen
MoveWindow
UnhookWindowsHookEx
CreateWindowExA
DestroyMenu
MessageBoxA
CloseClipboard
DispatchMessageA
PeekMessageA
TranslateAcceleratorA
IsDialogMessageA
DefWindowProcA
DestroyWindow
UnregisterClassA
RegisterClassExA
LoadCursorA
FindWindowA
SetCursor
PostQuitMessage
EndPaint
FillRect
BeginPaint
GetWindowLongA
PostThreadMessageA
GetQueueStatus
RegisterWindowMessageA
MsgWaitForMultipleObjects
UpdateWindow
LoadIconA
SetWindowTextA
GetWindowRect
GetSystemMetrics
EnumDisplaySettingsA
GetDesktopWindow
BringWindowToTop
GetKeyboardState
KillTimer
SetTimer
GetClientRect
SetRect
GetDC
ReleaseDC
ChangeDisplaySettingsA
GetClipboardData
ClipCursor
TranslateMessage
ShowWindow

gdi32

GetObjectA
StretchDIBits
SetDIBitsToDevice
DeleteObject
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
CreateSolidBrush
GetClipBox
GetGlyphOutlineA
GetTextMetricsA
CreateFontA
GetDeviceCaps

shell32

DragFinish
DragQueryFileA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

082396d7c869ccf148a4875852c6e33f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 169KB - Virtual size: 169KB

.data Size: 126KB - Virtual size: 3.6MB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 77KB - Virtual size: 76KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 169KB - Virtual size: 169KB

.data
Size: 126KB - Virtual size: 3.6MB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 77KB - Virtual size: 76KB