NEAS[.]f62c2f8ce00fcf1b8d7670e38b118730[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f62c2f8ce00fcf1b8d7670e38b118730.exe
Size

2.8MB
MD5

f62c2f8ce00fcf1b8d7670e38b118730
SHA1

8c3113439e3fd4aa876fdaaab7efe4b63d2b9c14
SHA256

5075f663ffee36e5c7e7c7d11a17144d0020856cb8d7a6f460eee47e5fee47cd
SHA512

56b806bdec2101711cc028b73b76ed04bfacb7074707fb016ed84d46654aced91c88d1be7b759a8caef2e1c4d0f0a126b3603287b37c1f5f4810e203af407a35
SSDEEP

49152:zIx4Mfvl3+C+Om2Wkve2arO4LmvDdBLnDi3xdnlT+SzVlZaPngJPHTVnNLwex+8x:o4MV3no2WytarO4LmvDdNnyl3lZaP25J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f62c2f8ce00fcf1b8d7670e38b118730.exe

Files

NEAS.f62c2f8ce00fcf1b8d7670e38b118730.exe
.exe windows:5 windows x86

236a9ed460c53e0ac99c5c088708bb1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

wininet

InternetGetConnectedState

kernel32

GetFileSizeEx
GetFileTime
GetNumberFormatW
GetTickCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RtlUnwind
EncodePointer
DecodePointer
ExitThread
ExitProcess
HeapSize
HeapQueryInformation
GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetFileAttributesExW
lstrcpyW
GlobalGetAtomNameW
GlobalFlags
InterlockedIncrement
TlsFree
GetVersionExW
FreeLibrary
LoadLibraryExW
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
SuspendThread
ResumeThread
SetThreadPriority
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetCurrentProcessId
WideCharToMultiByte
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
RaiseException
LoadLibraryA
InterlockedExchange
GetTempPathW
ResetEvent
SetErrorMode
GetModuleFileNameW
GetFullPathNameW
GetDriveTypeW
GetExitCodeThread
FormatMessageW
OpenMutexW
TerminateProcess
GetCurrentDirectoryW
GetDiskFreeSpaceExW
SetCurrentDirectoryW
MoveFileExW
RemoveDirectoryW
GetUserDefaultLangID
GetUserDefaultLCID
OpenProcess
GetLogicalDriveStringsW
QueryDosDeviceW
GetTempFileNameW
CreateDirectoryW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
WritePrivateProfileStringW
lstrlenW
GetShortPathNameW
VerifyVersionInfoW
GetCurrentThread
LocalAlloc
GetUserDefaultUILanguage
GetSystemDirectoryW
GetCurrentProcess
IsWow64Process
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetNativeSystemInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
lstrcmpiW
HeapFree
lstrcmpW
GetProcessHeap
HeapAlloc
HeapReAlloc
CreateEventW
CreateThread
CreateProcessW
GetExitCodeProcess
SetEvent
ActivateActCtx
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
CreateMutexW
FindFirstFileW
FindNextFileW
FindClose
Sleep
CopyFileW
GetFileAttributesW
SetFileAttributesW
CreateFileW
GetLastError
CloseHandle
DeleteFileW
MoveFileW
WaitForSingleObject
ReleaseMutex
lstrlenA
InterlockedDecrement
LocalFree
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
VerSetConditionMask
SetStdHandle

user32

SetTimer
KillTimer
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
IsIconic
DestroyIcon
CharNextW
OffsetRect
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
CreatePopupMenu
NotifyWinEvent
GetAsyncKeyState
SetClassLongW
GetSystemMenu
DrawStateW
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetCursorPos
BringWindowToTop
LockWindowUpdate
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
LoadImageW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
UnionRect
UpdateLayeredWindow
IsMenu
CreateMenu
PostThreadMessageW
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
CopyIcon
CharUpperBuffW
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
SubtractRect
DrawIcon
DestroyCursor
GetWindowRgn
SetRectEmpty
CopyImage
SystemParametersInfoW
DestroyMenu
RealChildWindowFromPoint
UnregisterClassW
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
PostQuitMessage
IntersectRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
GetMessageW
GetCursorPos
CharUpperW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
MoveWindow
SetWindowTextW
DeleteMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
LoadMenuW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
CopyRect
PtInRect
GetWindow
GetSysColor
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
ExitWindowsEx
SetDlgItemTextW
GetDlgItem
ShowWindow
EnumWindows
FindWindowW
SendMessageTimeoutW
GetWindowThreadProcessId
GetParent
GetClassNameW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
GetDesktopWindow
InvalidateRect
GetWindowRect
IsWindowVisible
LoadBitmapW
BeginPaint
EndPaint
ReleaseDC
SendMessageW
EnableWindow
GetDC
GetSystemMetrics
LoadStringW
SetLayeredWindowAttributes
CheckDlgButton
EnumDisplayMonitors
SetActiveWindow
GetMenuItemInfoW

gdi32

GetObjectW
GetDeviceCaps
CreateFontIndirectW
GetTextExtentPoint32W
CopyMetaFileW
CreateDCW
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
GetStockObject
StretchBlt
GetObjectType
CreateCompatibleDC
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
SelectObject
DeleteDC
SelectPalette
DeleteObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

comctl32

ImageList_GetIconSize

ole32

OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoTaskMemFree
CoInitialize
OleRun
CoInitializeEx
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoTaskMemAlloc

oledlg

OleUIBusyW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 396KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 744KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

236a9ed460c53e0ac99c5c088708bb1e

Headers

DLL Characteristics

File Characteristics

Imports

version

rpcrt4

wininet

kernel32

user32

gdi32

msimg32

comdlg32

comctl32

ole32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 317KB - Virtual size: 317KB

.data Size: 396KB - Virtual size: 426KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 744KB - Virtual size: 748KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 317KB - Virtual size: 317KB

.data
Size: 396KB - Virtual size: 426KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 744KB - Virtual size: 748KB