NEAS[.]233c58f5fae6f3f63d75f978bf8eea70[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.233c58f5fae6f3f63d75f978bf8eea70.exe
Size

2.4MB
MD5

233c58f5fae6f3f63d75f978bf8eea70
SHA1

8b4d76b56baef5c63df983d73a6e46992ee71c1d
SHA256

adcf32496f0b3214951a2cd3f7999fe66465dc9a634608fe43aabf97753505e9
SHA512

0e810e4951259de62d59ad02d2b265515aaa353cdeac1c185f7b038e29289e987ba30512b38a571a80f8716a2c5f218f6a9eca8333a539dea900f006fc8d1dc2
SSDEEP

24576:l4rnEgpkUuM1KU/Bs7oea5XJI2t/Lf5OxrVLngrlvky+Hb6Pq5Z9xosRdD0n/a92:mrE5Mjka5XJI2phOvLnggrVD4/RJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.233c58f5fae6f3f63d75f978bf8eea70.exe

Files

NEAS.233c58f5fae6f3f63d75f978bf8eea70.exe
.exe windows:5 windows x86

79f22b548cdefd77c430a5948b7dab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

__setusermatherr
_except_handler3
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
memchr
memcmp
memcpy
memset
tolower
toupper
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

winmm

timeGetTime

comctl32

ImageList_BeginDrag
InitializeFlatSB
ord17
ImageList_Write
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetBkColor
ImageList_EndDrag
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_DragMove
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalHandle
GlobalAlloc
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
IsBadReadPtr
IsDBCSLeadByteEx
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
lstrcmpW
lstrcpyW
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetPriorityClass
SetThreadLocale
SetThreadPriority
SetVolumeLabelW
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateThread
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
IsValidCodePage
GetCommandLineA
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GlobalAddAtomW
GetWindowsDirectoryW
GetVolumeInformationW
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTime
GetSystemInfo
GetStdHandle
GetStartupInfoW
GetShortPathNameW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLocalTime
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentDirectoryW
GetCPInfoExW
GetConsoleOutputCP
GetConsoleCP
GetComputerNameW
GetCommandLineW
GetACP
FreeResource
FormatMessageW
FlushInstructionCache
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExitThread
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
EnterCriticalSection
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateSemaphoreW
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareStringA
ExitProcess
GlobalLock

user32

MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WaitMessage
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadStringA
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
IntersectRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
MessageBeep
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMessageTime
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
GetLastActivePopup
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CountClipboardFormats
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharUpperBuffW
CharToOemBuffW
CharToOemA
CharNextW
CharLowerW
CharLowerBuffW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
RemoveMenu
EmptyClipboard
GetKeyState
GetWindowLongW
GetScrollRange
MapWindowPoints
EnableScrollBar

gdi32

FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreateRegion
ExcludeClipRect
EnumFontsW
EnumFontFamiliesW
EnumFontFamiliesExW
EnumEnhMetaFile
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
GdiFlush
GetBitmapBits
GetBkMode
GetBrushOrgEx
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
CreateFontIndirectW
GetSystemPaletteEntries
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetViewportOrgEx
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezierTo
Polygon
Polyline
RealizePalette
Rectangle
RectVisible
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
GetNearestPaletteIndex
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetPixel
SetRectRgn
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
SetWinMetaFileBits
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDIBits
GetDIBColorTable
GetDeviceCaps
GetCurrentPositionEx
GetCurrentObject
GetClipBox
CreateEnhMetaFileW
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
Chord
GetStretchBltMode
BitBlt
GetObjectW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW

comdlg32

FindTextW
ReplaceTextW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenProcessToken
GetUserNameW
RegSetValueExW

shell32

Shell_NotifyIconW
ShellExecuteW
SHGetFileInfoW

ole32

StringFromCLSID
StgCreateDocfileOnILockBytes
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
ProgIDFromCLSID
OleUninitialize
OleSetMenuDescriptor
OleInitialize
OleGetClipboard
OleDraw
IsAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CreateBindCtx
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoGetObject
CoGetInterfaceAndReleaseStream
CoGetClassObject
CoCreateInstance

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
SysReAllocStringLen
SysFreeString
GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SysAllocStringLen

shlwapi

PathMatchSpecW

ws2_32

getpeername
inet_addr
inet_ntoa
ioctlsocket
recv
shutdown
WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
gethostbyaddr

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79f22b548cdefd77c430a5948b7dab13

Headers

File Characteristics

Imports

msvcrt

winmm

comctl32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 12.1MB

.tls Size: 4KB - Virtual size: 12B

.data1 Size: 4KB - Virtual size: 648B

.cdata Size: 8KB - Virtual size: 6KB

.rsrc Size: 892KB - Virtual size: 891KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 12.1MB

.tls
Size: 4KB - Virtual size: 12B

.data1
Size: 4KB - Virtual size: 648B

.cdata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 892KB - Virtual size: 891KB