NEAS[.]9e2b247d55f41583035a5bf724e92a40_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9e2b247d55f41583035a5bf724e92a40_JC.exe
Size

1.9MB
MD5

9e2b247d55f41583035a5bf724e92a40
SHA1

3586a1b7bcae49d07e088360d7963c4221d6008b
SHA256

5f8511901a6ab93a6dce762895a74af48cf50efe6bbac62120367dff2f4d374d
SHA512

4951aecc9d34d1b8a53f7509591d33e725f2b13a1cb727bd4ed6ce6aa48594778a50efd6ecb6a0048444555bd4c3ea92d590f142edcd22c78b24fa115b3122e9
SSDEEP

49152:x6GUnbsutqW24X8tp/Z54e/4ZJ1kUvQ93xLgHzW1KhImWs:xVUnbsuIR7tp/Z54e/IqU49hLgHzRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9e2b247d55f41583035a5bf724e92a40_JC.exe

Files

NEAS.9e2b247d55f41583035a5bf724e92a40_JC.exe
.exe windows:5 windows x86

788dba479c9d1733cdec3c7594932159

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardListReadersW
SCardTransmit
SCardReconnect
SCardState
SCardDisconnect
SCardReleaseContext
SCardFreeMemory
g_rgSCardT0Pci
SCardEstablishContext
g_rgSCardT1Pci
SCardConnectA

sdtapi

SDT_SelectIDCard
SDT_ClosePort
SDT_GetSAMIDToStr
SDT_GetSAMStatus
SDT_ReadBaseMsg
SDT_StartFindIDCard
SDT_OpenPort

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

user32

DrawMenuBar
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
LockWindowUpdate
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
GetKeyNameTextW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
MapVirtualKeyW
GetMenuDefaultItem
CreatePopupMenu
DefFrameProcW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
DestroyWindow
EnumDisplayDevicesW
GetMessageW
ChangeDisplaySettingsExW
UnregisterClassW
LoadCursorW
GetDC
TranslateMessage
RegisterClassExW
SetWindowPos
ShowWindow
CreateWindowExW
GetSystemMetrics
SendMessageW
UpdateWindow
DefWindowProcW
EnumDisplaySettingsW
MoveWindow
DispatchMessageW
DrawTextExW
DrawTextW
EndPaint
ScreenToClient
FillRect
RegisterWindowMessageW
GetMessagePos
GetMessageTime
NotifyWinEvent
SendDlgItemMessageA
CreateMenu
MapDialogRect
SetCursor
ShowOwnedPopups
PostMessageW
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
IsIconic
PostQuitMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyCursor
GetWindowRgn
DrawIcon
RegisterDeviceNotificationW
IsChild
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
GetWindowTextW
GetWindowTextLengthW
EnableWindow
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
ReleaseDC
GetSysColor
GetSysColorBrush
SetFocus
SetScrollPos
GetScrollPos
GetWindow
IsWindow
GetDlgItem
CheckDlgButton
GetDlgCtrlID
GetFocus
SetWindowTextW
SetWindowLongW
IsDialogMessageW
GetWindowRect
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameW
RealChildWindowFromPoint
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
DestroyIcon
CharUpperW

kernel32

IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
SetStdHandle
GetFileAttributesExW
WriteConsoleW
SetEnvironmentVariableA
SetEndOfFile
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
CopyFileW
GetModuleHandleA
LoadLibraryW
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
InitializeCriticalSection
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
lstrcmpW
SetThreadPriority
ResumeThread
GlobalAddAtomW
FindClose
FindFirstFileW
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetFilePointer
GetDateFormatW
DuplicateHandle
lstrcmpiW
GetSystemDirectoryW
GetUserDefaultUILanguage
FreeResource
GlobalDeleteAtom
GlobalFindAtomW
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetCurrentDirectoryW
lstrcpyW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
OutputDebugStringW
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
GetFileType
GetLocaleInfoW
ReadConsoleW
RtlUnwind
GetCurrentThreadId
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetConsoleMode
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
CreateThread
DeleteCriticalSection
GetModuleFileNameA
CreatePipe
DecodePointer
LockResource
LocalAlloc
GetConsoleScreenBufferInfo
GlobalFree
HeapSize
RaiseException
GetStartupInfoW
GetConsoleWindow
SizeofResource
InitializeCriticalSectionAndSpinCount
GlobalAlloc
GetProcessHeap
GetModuleHandleW
HeapFree
InterlockedDecrement
HeapAlloc
CreateProcessW
LoadResource
FindResourceW
HeapReAlloc
GetPrivateProfileStringA
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
SetConsoleTextAttribute
PurgeComm
CreateFileW
GetTickCount
ClearCommError
SetupComm
LocalFree
CloseHandle
CancelIo
DeviceIoControl
CreateEventW
LoadLibraryA
ResetEvent
GetProcAddress
GetLastError
GetOverlappedResult
ReadFile
FormatMessageW
WriteFile
WaitForSingleObject
FreeLibrary
CreateFileA
OutputDebugStringA
Sleep
VirtualQuery
VirtualAlloc
GetSystemInfo
ExitThread
HeapQueryInformation
lstrlenA
LCMapStringW
CompareStringW
SetFilePointerEx
GetTimeFormatW
UnlockFile

gdi32

GetTextFaceW
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
PtInRegion
FrameRgn
RoundRect
CreateRoundRectRgn
OffsetRgn
GetRgnBox
Rectangle
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetTextMetricsW
GetTextExtentPoint32W
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteObject
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteDC
EnumFontFamiliesExW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
SHGetPathFromIDListW
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteW

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetCurrentThemeName

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
OleGetClipboard

oleaut32

VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
SysAllocStringLen
VarBstrCat
VariantInit
SafeArrayAccessData
SafeArrayGetLBound
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayGetUBound
SafeArrayUnaccessData
SysStringLen
SysFreeString
VariantClear
SysAllocString

gdiplus

GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusStartup
GdipCreatePen1
GdipCreatePath
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipCreateFromHDC
GdipDeletePath
GdipAddPathLineI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipDrawPath
GdipDeletePen
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Exports

Exports

_CloseDevices@0
_GetDeviceInfo@4
_GetDeviceStatus@0
_GetErrorMessage@8
_OpenDevices@0
_RegisterDeviceStatusCallBack@4
_RegisterTouchInfoCallBack@4
_SetButtonPosition@24
_SetCmdToDevice@4
_SetStringToDevice@20
_UnregisterDeviceStatusCallBack@4
_UnregisterTouchInfoCallBack@4
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_write

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

788dba479c9d1733cdec3c7594932159

Headers

DLL Characteristics

File Characteristics

Imports

winscard

sdtapi

setupapi

user32

kernel32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

version

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 339KB - Virtual size: 339KB

.data Size: 31KB - Virtual size: 1.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 119KB - Virtual size: 118KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 339KB - Virtual size: 339KB

.data
Size: 31KB - Virtual size: 1.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 119KB - Virtual size: 118KB