NEAS[.]c422244e410d0fbb729f25206cb6ec60[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c422244e410d0fbb729f25206cb6ec60.exe
Size

2.0MB
MD5

c422244e410d0fbb729f25206cb6ec60
SHA1

6fbd3c1a8737521758376e20cff72aea9ceea698
SHA256

bcb618ecee4ab734b211b3059015b09437ad92a058180162f1cc73b6339581f6
SHA512

0fbd26152331d1d788a6018ef3d1f3d0580dd4b11360b31b75a16a2d27fcfe3ff1986fb7205b91ec5f21975cc270e7a283fc60192e66387168e6cff6271dfcc3
SSDEEP

49152:RjhVd3MyIJpGTpF+IzHOiEj42j0x9zaRlOzFzNcdhDlr9R6J//w:R9H00ZFD2j0x9zaRlOzFzNcdhDlr9R6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c422244e410d0fbb729f25206cb6ec60.exe

Files

NEAS.c422244e410d0fbb729f25206cb6ec60.exe
.exe windows:5 windows x86

bdc6fffddd5f1d41b5e8b35f3a97bde4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
ord17

ddraw

DirectDrawCreate

winmm

joyGetPos
timeGetTime
joyGetDevCapsA

dsound

ord1
ord2

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

dinput8

DirectInput8Create

user32

RegisterHotKey
MessageBoxA
PostMessageA
OpenClipboard
EmptyClipboard
wsprintfA
CloseClipboard
LoadBitmapA
IsClipboardFormatAvailable
GetClipboardData
PostQuitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
GetKeyState
SetClipboardData
ReleaseCapture
GetDlgItemTextA
SetWindowTextA
GetParent
CheckRadioButton
SetFocus
EnableWindow
CheckDlgButton
IsDlgButtonChecked
DialogBoxParamA
SendDlgItemMessageA
EndDialog
SetCursorPos
RegisterClassExA
LoadIconA
CreateWindowExA
GetSystemMetrics
ClipCursor
SetWindowPos
SetWindowLongA
DestroyMenu
TrackPopupMenu
EnableMenuItem
CheckMenuItem
ClientToScreen
GetSubMenu
LoadMenuA
DefWindowProcA
LoadCursorA
SetCursor
UpdateWindow
GetUpdateRect
FillRect
ScreenToClient
GetCursorPos
SetCapture
SetForegroundWindow
PtInRect
GetWindowRect
IsIconic
InvalidateRect
EndPaint
BeginPaint
OffsetRect
GetSysColor
LoadImageA
ShowCursor
CharLowerBuffA
IsCharLowerA
KillTimer
SetTimer
GetDesktopWindow
VkKeyScanA
GetClientRect
SendMessageA
GetDC
GetWindowTextA
ReleaseDC
GetDlgItem
MapWindowPoints
MoveWindow

gdi32

GdiFlush
CreateFontIndirectA
GetDeviceCaps
GetObjectA
SetViewportOrgEx
TextOutA
Rectangle
LineTo
MoveToEx
ExtTextOutA
SetTextColor
Polyline
CreatePen
SetTextAlign
SetBkColor
SetBkMode
BitBlt
CreateSolidBrush
GetStockObject
StretchBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject
GetTextExtentPoint32A
GetTextMetricsA
CreateFontA
GdiSetBatchLimit
CreateDIBSection

advapi32

RegSetValueExA
RegSetValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA

shell32

DragAcceptFiles
DragQueryPoint
DragFinish
ShellExecuteA
DragQueryFileA

comdlg32

GetSaveFileNameA
ChooseColorA
GetOpenFileNameA

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

wsock32

htonl
bind
htons
socket
closesocket
shutdown
accept
recv
send
WSAStartup
WSAAsyncSelect
listen
WSACleanup

kernel32

TlsGetValue
TlsAlloc
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
FatalAppExitA
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetSystemTimeAsFileTime
CreateProcessA
HeapSetInformation
TlsSetValue
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocaleInfoA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleW
DecodePointer
EncodePointer
ExpandEnvironmentStringsA
LocalFree
LocalAlloc
GlobalDeleteAtom
GlobalAddAtomA
DeleteFileA
GetFileAttributesA
Beep
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
IsProcessorFeaturePresent
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapCreate
HeapDestroy
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetUserDefaultLCID
GetStringTypeW
GetDriveTypeW
SetEndOfFile
EnumSystemLocalesA
IsValidLocale
GetCommandLineA
GetProcessHeap
GetTimeZoneInformation
CreateFileW
WaitForSingleObject
CreateSemaphoreA
DeleteCriticalSection
InitializeCriticalSection
ClearCommError
WaitCommEvent
CompareStringW
FindClose
GetExitCodeProcess
GetStartupInfoW
SetCommMask
LeaveCriticalSection
EnterCriticalSection
SetCommTimeouts
SetCommState
SetEnvironmentVariableA
GetCommState
GetLastError
WriteFile
GetLocalTime
GetModuleHandleA
GetExitCodeThread
SetEvent
CreateThread
CreateEventA
WaitForMultipleObjects
ReadFile
SetFilePointer
SetPriorityClass
GetCurrentProcess
SetThreadPriority
GetCurrentThread
Sleep
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
CreateFileA
GetFileSize
CloseHandle
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
FreeLibrary
GetProcAddress
LoadLibraryA
OutputDebugStringA
VirtualFree
VirtualAlloc
ExitProcess
FindResourceA
SizeofResource
LoadResource
LockResource

Sections

.text
Size: 737KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 872KB - Virtual size: 871KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdc6fffddd5f1d41b5e8b35f3a97bde4

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

ddraw

winmm

dsound

version

dinput8

user32

gdi32

advapi32

shell32

comdlg32

ole32

wsock32

kernel32

Sections

.text Size: 737KB - Virtual size: 736KB

.rdata Size: 422KB - Virtual size: 421KB

.data Size: 26KB - Virtual size: 1.1MB

.rsrc Size: 872KB - Virtual size: 871KB

.text
Size: 737KB - Virtual size: 736KB

.rdata
Size: 422KB - Virtual size: 421KB

.data
Size: 26KB - Virtual size: 1.1MB

.rsrc
Size: 872KB - Virtual size: 871KB