NEAS[.]016b3809ebe79b76235c7e6c822166b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.016b3809ebe79b76235c7e6c822166b0.exe
Size

736KB
MD5

016b3809ebe79b76235c7e6c822166b0
SHA1

20c4fddc2fc2e96be871db1bde3800dcba559d07
SHA256

889dff4fe3094ee40497466ef0c8b322564dc5d5aa34da78b9ed84fd4b998a8f
SHA512

d54551431719a14b30863513fb61d733ddfbc13fe2f305632e91a1d4d8a2e16caf855b96563becd7338f175b251bdbbd8fffcf45b52e1e4712fb66542c21f1f1
SSDEEP

12288:5oH+D2EGKtbE5aV5lpVblaSey2cfCkZ3TA:Z2RsA5w5jicfCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.016b3809ebe79b76235c7e6c822166b0.exe

Files

NEAS.016b3809ebe79b76235c7e6c822166b0.exe
.exe windows:5 windows x86

02f58c374ab5a97424798d5ed5e68af4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharUpperW
SetActiveWindow
EnumDisplaySettingsW
GetClassNameA
SetSysColors
GetClipboardOwner
OffsetRect
GetDlgItemInt
CreateDesktopW
ScrollWindowEx

shell32

FindExecutableA
DragAcceptFiles
ShellExecuteExW
DragQueryFileA
ShellAboutA
ShellExecuteA
ExtractIconW
DoEnvironmentSubstA

ole32

CoDosDateTimeToFileTime
CoInitializeSecurity
StgIsStorageILockBytes
CoGetInterfaceAndReleaseStream
CoRevokeMallocSpy

gdi32

Chord
AbortPath
CreateDCA
CombineTransform
CloseFigure
CreateDCW

opengl32

glIndexs
glEvalCoord2dv
glEvalCoord2d
glTexCoord2d
glTexImage2D
glPopMatrix
glTexCoord3i

dbghelp

ImagehlpApiVersion
SymUnDName
GetTimestampForLoadedLibrary
MiniDumpWriteDump
SymGetSymFromAddr
SymEnumSymbols
SymEnumSym

winmm

PlaySoundW
waveInGetID
sndPlaySoundW
mixerGetControlDetailsA
PlaySoundA

kernel32

CompareStringW
CloseHandle
WriteConsoleW
SetStdHandle
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
SetEnvironmentVariableA
HeapAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
CreateFileW
HeapReAlloc
SetUnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapFree
Sleep
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetSystemWindowsDirectoryA
InitAtomTable
GlobalReAlloc
GetFileInformationByHandle
BeginUpdateResourceW
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
WideCharToMultiByte
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 680KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02f58c374ab5a97424798d5ed5e68af4

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

gdi32

opengl32

dbghelp

winmm

kernel32

Sections

.text Size: 48KB - Virtual size: 48KB

.data Size: 7KB - Virtual size: 7.7MB

.rsrc Size: 680KB - Virtual size: 2.4MB

.text
Size: 48KB - Virtual size: 48KB

.data
Size: 7KB - Virtual size: 7.7MB

.rsrc
Size: 680KB - Virtual size: 2.4MB