NEAS[.]1a37e4ec21f06aea284dfac448a1c1d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1a37e4ec21f06aea284dfac448a1c1d0.exe
Size

1.9MB
MD5

1a37e4ec21f06aea284dfac448a1c1d0
SHA1

4c4604d9cc57b47ed4cafb4edd02e524add2ad7b
SHA256

1289b384ad966a068942349ca7da16304652d8a41478bd184f5273a54652957e
SHA512

325d8b4fdebae27695039da7721defd6e968a6edbb2b56caa4c71b4441d8f5a63a6e5d2cf04b417c204cb7946efdb50468a4fc2269c4553664df26063f5d4004
SSDEEP

49152:2RHlmmWjqrDMXpknjURHioSH9RFLJOtKO8CAykiNj942qHqFvjFfGJEObx7/+s5h:2RHlmmWjqrDMXpknjURHioSH9RFLJOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1a37e4ec21f06aea284dfac448a1c1d0.exe

Files

NEAS.1a37e4ec21f06aea284dfac448a1c1d0.exe
.dll windows:5 windows x86

10cbc72fc12399c96e310ffba884bf82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ipps-8.0

ippsMalloc_8u
ippsFree
ippsMulPack_64f_I
ippsMulPack_64f
ippsAdd_64f_I
ippsFFTInv_PackToR_64f_I
ippsHilbert_32f32fc
ippsFFTInv_CCSToR_64f_I
ippsHilbertInitAlloc_32f32fc
ippsFFTFwd_RToPack_64f_I
ippsHilbertFree_32f32fc
ippsConjPack_64fc
ippsMul_64fc_I
ippsFFTGetBufSize_R_64f
ippsFFTInitAlloc_R_64f
ippsFFTFree_R_64f

ippcore-8.0

ippSetNumThreads
ippGetNumThreads
ippSetFlushToZero
ippSetDenormAreZeros

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

kernel32

TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
SetFilePointer
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetStdHandle
FreeLibrary
VirtualFree
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
IsBadReadPtr
SetLastError
Sleep
GetCurrentThreadId
OutputDebugStringA
GlobalLock
GlobalAlloc
GlobalUnlock
CreateFileA
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetCurrentProcess
GetCurrentThread
FileTimeToSystemTime
SetCurrentDirectoryA
FindFirstFileA
FindClose
GetModuleFileNameA
FindNextFileA
GetProcessAffinityMask
GetCurrentDirectoryA
GetFileTime
SetThreadAffinityMask
CloseHandle
GetCurrentProcessId
WaitForSingleObject
SetEvent
CreateEventA
ResetEvent
QueryPerformanceCounter
GetLocaleInfoW
SetThreadPriority
ResumeThread
CreateThread
WriteFile
DeleteFileA
GetVolumeInformationA
GetTickCount
FindResourceA
LoadResource
InterlockedIncrement
InterlockedDecrement
GlobalSize
WideCharToMultiByte
SizeofResource
GetVersionExW
MultiByteToWideChar
GlobalFree
LockResource
HeapDestroy
HeapCreate
ExitProcess
GetModuleHandleW
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
LCMapStringW
RtlUnwind
GetCommandLineA
CreateDirectoryA
ReadFile
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DecodePointer
EncodePointer
RaiseException
GetLastError
InterlockedExchange
LocalAlloc
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
SetStdHandle
WriteConsoleW
SetEndOfFile
GetUserDefaultLCID
IsProcessorFeaturePresent
SetHandleCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FlushFileBuffers
GetStringTypeW
CreateFileW

user32

SetTimer
TrackPopupMenu
SetCapture
UnregisterClassW
KillTimer
GetKeyState
GetFocus
TrackMouseEvent
LoadCursorW
GetWindowInfo
GetClientRect
GetUpdateRgn
GetWindowTextLengthW
SetCursor
SetFocus
BeginPaint
wsprintfW
GetDC
GetKeyboardState
GetAsyncKeyState
InvalidateRect
GetWindowLongW
DestroyWindow
ToAscii
UnhookWindowsHookEx
SetWindowsHookExA
DispatchMessageW
GetSystemMetrics
SetWindowPos
GetClassNameW
PeekMessageW
GetParent
GetWindowRect
DefWindowProcW
CallWindowProcW
SetMenuItemInfoW
SetWindowTextW
DestroyMenu
MapWindowPoints
SendMessageW
RegisterClassW
ReleaseCapture
GetCursor
CreateWindowExW
SetMenuInfo
CreatePopupMenu
GetCursorPos
SetWindowLongW
GetWindowTextW
AppendMenuW
EndPaint

gdi32

SetBkColor
CreateFontIndirectW
GetRegionData
DeleteDC
SetTextColor
DeleteObject
CreateCompatibleDC
CreateDIBSection
CreateSolidBrush
CreateRectRgn

shell32

DragQueryFileW

ole32

RegisterDragDrop
DoDragDrop
CoCreateInstance
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
RevokeDragDrop

gdiplus

GdipSetPenLineCap197819
GdipSetSmoothingMode
GdipClosePathFigure
GdipGetFamily
GdipAddPathBezier
GdipDrawPolygon
GdipDeleteFontFamily
GdipBitmapUnlockBits
GdipCreateSolidFill
GdipDisposeImageAttributes
GdipSaveGraphics
GdipSetPenColor
GdipAlloc
GdipCreateMatrix2
GdipDisposeImage
GdipAddPathEllipse
GdipAddPathLine
GdipSetPenWidth
GdipCreateFont
GdipGetFontSize
GdipSetPageUnit
GdipDeletePath
GdipTransformPath
GdipClonePath
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawRectangle
GdipSetPenDashArray
GdipDrawString
GdipGetLineSpacing
GdipTranslateWorldTransform
GdipFillRectangle
GdipCreateHBITMAPFromBitmap
GdipCreateFontFamilyFromName
GdipCreateFromHDC
GdipSetSolidFillColor
GdipDrawLine
GdipFillPath
GdipGetPathLastPoint
GdipDeleteMatrix
GdipGetCellAscent
GdipSetInterpolationMode
GdipBitmapLockBits
GdipRestoreGraphics
GdipCloneImage
GdipFillEllipse
GdipSetPenDashStyle
GdipCreatePath
GdipGetImageWidth
GdipSetPixelOffsetMode
GdipCreatePen1
GdipSetPenLineJoin
GdipSetPenDashOffset
GdipCreateFromHWND
GdipSetLineBlend
GdiplusStartup
GdipAddPathRectangle
GdipGetDpiY
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetPathWorldBounds
GdipDeleteFont
GdipDrawPath
GdipGetFontHeightGivenDPI
GdipSetTextRenderingHint
GdipSetClipRect
GdipStartPathFigure
GdipMeasureString
ord1
GdipDrawEllipse
GdipFillPolygon
GdipGetEmHeight
GdipDrawImageRectRectI
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromStreamICM
GdipCloneBrush
GdipDeletePen
GdipFree
GdipDeleteBrush
GdiplusShutdown
GdipCreateLineBrush
GdipGetImageGraphicsContext
GdipCreateBitmapFromResource
GdipSetPathFillMode
GdipGetCellDescent

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10cbc72fc12399c96e310ffba884bf82

Headers

DLL Characteristics

File Characteristics

Imports

ipps-8.0

ippcore-8.0

winmm

kernel32

user32

gdi32

shell32

ole32

gdiplus

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 193KB - Virtual size: 193KB

.data Size: 10KB - Virtual size: 36KB

.rsrc Size: 290KB - Virtual size: 289KB

.reloc Size: 91KB - Virtual size: 90KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 193KB - Virtual size: 193KB

.data
Size: 10KB - Virtual size: 36KB

.rsrc
Size: 290KB - Virtual size: 289KB

.reloc
Size: 91KB - Virtual size: 90KB