NEAS[.]bb2bc69dd70aa53f51f29944d8d3b040[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.bb2bc69dd70aa53f51f29944d8d3b040.exe
Size

362KB
MD5

bb2bc69dd70aa53f51f29944d8d3b040
SHA1

1d40cc0dc683656ad9e0b93caac1a971795dbf77
SHA256

05ab699efb499029b008d85ec7ddaa054cf8e70f8643129f5658e8e9fd7dd95f
SHA512

9f5e0bd983ac8c6cfd2efb7d4f74f5343ddd3706416a3bbc91bd261d49d1be6859a900a5d29e00a4c6df930fa36d1d7dd128b5e37e4fe618dd47e721fd4a6c1b
SSDEEP

6144:hbxLdD2njmu36uNWvXKRL0l3pDPloPITPinEgPDQtDEVKIg8gVDo:h9L436y6KRLEhPloPITPbgPktDEVKIg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb2bc69dd70aa53f51f29944d8d3b040.exe

Files

NEAS.bb2bc69dd70aa53f51f29944d8d3b040.exe
.dll windows:6 windows x64

8e874f1044f0968005c8b6e8ad63436b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

DrawFocusRect
ReleaseDC
GetDesktopWindow
GetWindowDC

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen
DeleteObject
LineTo
MoveToEx
SetROP2
BitBlt

vcruntime140

__std_type_info_destroy_list
memcpy
__C_specific_handler
strrchr
strstr
memset

api-ms-win-crt-stdio-l1-1-0

ftell
fseek
fread
fopen
fclose
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
isspace
_stricmp

api-ms-win-crt-convert-l1-1-0

strtod
strtol

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initialize_narrow_environment
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
exit

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
DisableThreadLibraryCalls
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
QueryPerformanceCounter

Exports

Exports

TixComputeTextGeometry
TixDItemGetAnchor
TixDItemStyleChanged
TixDItemStyleConfigureGCs
TixDItemStyleFree
TixDisplayText
TixFm_AddToMaster
TixFm_Configure
TixFm_DeleteMaster
TixFm_FindClientPtrByName
TixFm_ForgetOneClient
TixFm_FreeMasterInfo
TixFm_GetFormInfo
TixFm_StructureProc
TixFm_Unlink
TixFm_UnlinkFromMaster
TixGetColorDItemGC
TixGetDefaultDItemStyle
TixGetHashTable
TixGrDataFirstCell
TixGrDataFirstRow
TixGrDataNextCell
TixGrDataNextRow
TixGridDataConfigRowColSize
TixGridDataCreateEntry
TixGridDataDeleteEntry
TixGridDataDeleteRange
TixGridDataDeleteSearchedEntry
TixGridDataFindEntry
TixGridDataGetGridSize
TixGridDataGetIndex
TixGridDataGetRowColSize
TixGridDataMoveRange
TixGridDataSetFree
TixGridDataSetInit
TixGridDataUpdateSort
Tix_AddDItemType
Tix_ArgcError
Tix_CallConfigMethod
Tix_CallMethod
Tix_ChangeOneOption
Tix_ChangeOptions
Tix_ConfigureInfo2
Tix_ConfigureValue2
Tix_CreateCommands
Tix_CreateSubWindow
Tix_DItemCalculateSize
Tix_DItemComponent
Tix_DItemConfigure
Tix_DItemCreate
Tix_DItemDisplay
Tix_DItemDrawBackground
Tix_DItemFillNormalBG
Tix_DItemFree
Tix_DefinePixmap
Tix_DrawAnchorLines
Tix_EvalArgv
Tix_ExistMethod
Tix_Exit
Tix_FindConfigSpecByName
Tix_FindMethod
Tix_FindPublicMethod
Tix_FreeArgumentList
Tix_GetAnchorGC
Tix_GetChars
Tix_GetConfigSpecFullName
Tix_GetContext
Tix_GetDItemType
Tix_GetMethodFullName
Tix_GetRenderBuffer
Tix_GetScrollFractions
Tix_GetVar
Tix_GlobalVarEval
Tix_GrAddChangedRect
Tix_GrCancelDoWhenIdle
Tix_GrConfigSize
Tix_GrDoWhenIdle
Tix_GrFormat
Tix_GrFreeElem
Tix_GrFreeUnusedColors
Tix_GrScrollPage
Tix_GrSelection
Tix_GrSetSize
Tix_HLAllocColumn
Tix_HLCancelResizeWhenIdle
Tix_HLColumn
Tix_HLComputeGeometry
Tix_HLComputeHeaderGeometry
Tix_HLCreateHeaders
Tix_HLDrawHeader
Tix_HLElementLeftOffset
Tix_HLElementTopOffset
Tix_HLFindElement
Tix_HLFreeHeaders
Tix_HLHeader
Tix_HLIndicator
Tix_HLItem
Tix_HLItemInfo
Tix_HLMarkElementDirty
Tix_HLResizeNow
Tix_HLResizeWhenIdle
Tix_HandleSubCmds
Tix_Init
Tix_InitScrollInfo
Tix_LinkListAppend
Tix_LinkListDelete
Tix_LinkListDeleteRange
Tix_LinkListFind
Tix_LinkListFindAndDelete
Tix_LinkListInit
Tix_LinkListInsert
Tix_LinkListIteratorInit
Tix_LinkListNext
Tix_LinkListStart
Tix_MultiConfigureInfo
Tix_QueryAllOptions
Tix_QueryOneOption
Tix_SetDefaultStyleTemplate
Tix_SetRcFileName
Tix_SetScrollBarView
Tix_SetWindowItemSerial
Tix_SimpleListAppend
Tix_SimpleListDelete
Tix_SimpleListDeleteRange
Tix_SimpleListFind
Tix_SimpleListFindAndDelete
Tix_SimpleListInit
Tix_SimpleListInsert
Tix_SimpleListIteratorInit
Tix_SimpleListNext
Tix_SimpleListStart
Tix_SplitConfig
Tix_SuperClass
Tix_UnknownPublicMethodError
Tix_UnmapInvisibleWindowItems
Tix_UpdateScrollBar
Tix_ValueMissingError
Tix_WidgetConfigure2
Tix_WindowItemListRemove
Tix_ZAlloc
TixpInitPixmapInstance
TixpXpmAllocTmpBuffer
TixpXpmDisplay
TixpXpmFreeInstanceData
TixpXpmFreeTmpBuffer
TixpXpmRealizePixmap
TixpXpmSetPixel
tixCellUid
tixColumnUid
tixDisabledUid
tixNormalUid
tixRowUid

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e874f1044f0968005c8b6e8ad63436b

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 274KB - Virtual size: 274KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 60KB - Virtual size: 62KB

.pdata Size: 7KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 274KB - Virtual size: 274KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 60KB - Virtual size: 62KB

.pdata
Size: 7KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB