NEAS[.]e8cc6520419b1dd907930cb79b603020[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.e8cc6520419b1dd907930cb79b603020.exe
Size

323KB
MD5

e8cc6520419b1dd907930cb79b603020
SHA1

e1f0131151623e5bcd85eb56ccaa12a6f9105b33
SHA256

68c5650993fc9b944a7c86cdca0fc726aa4ed2714ce419ba7a36ac911e1ac48a
SHA512

6a31885d5a81a0d02b18341322c1eda372828c42140fa4f64ca8a1717ff3668f10177ccec8a6f49eebe1d4a1f4b2429a214ffc70fa7c7dffdd71a6e06fa51b37
SSDEEP

6144:kRXIqYH7S8TABX7TbU0EwQ3xAvuEin1hwLGLDQN3TrWqxbXnE:eXh7X7T1Ojn1hwCLDQRTrWKb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e8cc6520419b1dd907930cb79b603020.exe

Files

NEAS.e8cc6520419b1dd907930cb79b603020.exe
.exe windows:5 windows x86

4b8ad644467e8510b67dc29a3de689ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetFullPathNameW
SetErrorMode
WritePrivateProfileStringW
GetStartupInfoW
RtlUnwind
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GetVolumeInformationW
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetThreadLocale
lstrlenA
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleA
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetFileTime
GetFileSizeEx
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
GetModuleFileNameW
WideCharToMultiByte
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
MultiByteToWideChar
GetVersionExA
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetTickCount
Sleep
GetCommandLineW
GlobalAlloc
GlobalFree
GetUserDefaultLangID
GetFileAttributesW
GetSystemDirectoryW
GetPrivateProfileStringW
lstrlenW
GetPrivateProfileIntW
OutputDebugStringW
CreateFileW
SetFilePointer
WriteFile
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcAddress
GetLocalTime
GetCurrentDirectoryW
lstrcatW
SetLastError
LoadLibraryW
GetModuleHandleW
LoadLibraryExW
GetLastError

user32

CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
RegisterClipboardFormatW
PostThreadMessageW
MessageBeep
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetCursor
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CharNextW
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ReleaseDC
GetDC
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
UnregisterClassW
ReleaseCapture
SetCapture
CharUpperW
InvalidateRect
SetMenuItemBitmaps
SetRect
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
GetClientRect
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
wsprintfW
FindWindowW
GetClassInfoW
RegisterClassW
LoadIconW
SendMessageW
EnableWindow
CallNextHookEx
GetMessageW

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
SetViewportExtEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
DeleteObject
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
CreateBitmap
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

wsock32

accept
socket
select
bind
WSASetLastError
connect
htonl
recvfrom
WSAAsyncSelect
send
recv
htons
ioctlsocket
WSAGetLastError
setsockopt
closesocket
WSACleanup
sendto
WSAStartup

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b8ad644467e8510b67dc29a3de689ea

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

wsock32

Sections

.text Size: 227KB - Virtual size: 227KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 227KB - Virtual size: 227KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 23KB - Virtual size: 23KB