NEAS[.]6fea52837ee54425938c4af9da692270[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6fea52837ee54425938c4af9da692270.exe
Size

209KB
MD5

6fea52837ee54425938c4af9da692270
SHA1

54cd9cfdae117f820450d0aa61036e4b932d2958
SHA256

65f661b648d75ae3374c23ae1e703e0b027a2a7fe99548564737a5a1b7a77939
SHA512

24db7f4f27fe20a9610b66430d792cd39df78659e1ff7578226baee35a1680fe729fe0d1abc348bde3e6d580bec02c7f563d998a1990771d6bd0cd7be10747a4
SSDEEP

6144:sOB8K/S3r3FfK3yDrjQVEzUIVhK+2aZyRO:sBKKzFfKCbQVEzNz4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6fea52837ee54425938c4af9da692270.exe

Files

NEAS.6fea52837ee54425938c4af9da692270.exe
.exe windows:4 windows x86

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetModuleHandleA
GetTempFileNameA
GetNumberFormatW
ExpandEnvironmentStringsA
GetMailslotInfo
GetExitCodeProcess
FindResourceW
GetModuleFileNameW
GetProcAddress
ConnectNamedPipe
CreateFileMappingW
Beep
lstrlenW
CreateThread
GetHandleInformation
SetLocaleInfoA
SetThreadPriority
GetLogicalDriveStringsW
GetLastError
GetSystemTime
CreateMailslotA
OpenSemaphoreW
GetFullPathNameA
GlobalAlloc
QueryPerformanceCounter
OpenSemaphoreA
CreateSemaphoreW
GetVersionExA
SetCurrentDirectoryA
MulDiv
GetStringTypeA
GetFileType
lstrcpyA
GlobalGetAtomNameA
SetPriorityClass
GetStartupInfoW
InitializeCriticalSection
GetFileAttributesA
CreateMutexW
GetEnvironmentVariableW
GetFullPathNameW
ExitThread
GetTempPathW

user32

SetWindowLongA
GetDC
TrackPopupMenu
CharNextA
AnimateWindow
CopyImage
AppendMenuW
wsprintfA
CreateDesktopA
SetCapture
GetIconInfo
LoadBitmapA
GetClassNameW
IsChild
SetCursor
CreateDesktopW
GetDlgItem
GetMenuItemRect
GetClientRect
GetMenuItemInfoA
BringWindowToTop
UpdateWindow
MonitorFromRect
UpdateLayeredWindow
LoadIconW
IsWindowEnabled
LoadCursorA
OpenClipboard
GetMessageW
DefWindowProcA
RemoveMenu

gdi32

EndPath
CreatePatternBrush
UpdateColors
GetCharacterPlacementW
GetGlyphIndicesW
GetObjectType
CreateDCA
GetMetaFileA

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetDataFromIDListW
SHGetFolderLocation
SHCreateDirectory
SHGetFolderPathW
StrRStrA
StrRStrW

ole32

CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateInstanceEx
CoInitializeEx
OleInitialize
OleCreate
CoFileTimeNow

oleaut32

SafeArrayPutElement
VarR8FromDisp
VarI4FromUI4

setupapi

pSetupGuidFromString
SetupDiDeleteDeviceInfo
SetupScanFileQueueA
SetupDiGetClassDevPropertySheetsW
SetupDiClassGuidsFromNameExA

ws2_32

htonl
gethostbyaddr
setsockopt
getnameinfo
getservbyport
htons
WSACreateEvent
sendto

inetcomm

MimeOleCreateHeaderTable
CreateSMTPTransport
MimeOleSMimeCapRelease
MimeOleSetPropW
MimeOleCreateByteStream
EssSignCertificateEncodeEx
MimeOleParseRfc822AddressW
MimeOleSetBodyPropA
EssReceiptRequestDecodeEx
EssReceiptEncodeEx
HrGetDisplayNameWithSizeForFile

crypt32

CertGetStoreProperty
CertUnregisterSystemStore
I_CertSrvProtectFunction
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertAddCRLLinkToStore
CryptHashMessage
RegDeleteValueU
CryptMsgGetAndVerifySigner
CryptVerifySignatureU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cKhu
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AqeNl
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Dv
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NEEiJj
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RD
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MM
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VvQw
Size: 1KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

setupapi

ws2_32

inetcomm

crypt32

Sections

.text Size: 12KB - Virtual size: 11KB

.cKhu Size: 2KB - Virtual size: 36KB

.AqeNl Size: 4KB - Virtual size: 20KB

.G Size: 1KB - Virtual size: 29KB

.Dv Size: 2KB - Virtual size: 31KB

.NEEiJj Size: 1KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 5KB

.RD Size: 1024B - Virtual size: 11KB

.R Size: 1024B - Virtual size: 4KB

.MM Size: 2KB - Virtual size: 25KB

.VvQw Size: 1KB - Virtual size: 179KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.cKhu
Size: 2KB - Virtual size: 36KB

.AqeNl
Size: 4KB - Virtual size: 20KB

.G
Size: 1KB - Virtual size: 29KB

.Dv
Size: 2KB - Virtual size: 31KB

.NEEiJj
Size: 1KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 5KB

.RD
Size: 1024B - Virtual size: 11KB

.R
Size: 1024B - Virtual size: 4KB

.MM
Size: 2KB - Virtual size: 25KB

.VvQw
Size: 1KB - Virtual size: 179KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1KB - Virtual size: 1KB