NEAS[.]f77f5f5bf3deeba32bb9812c32c6ec90[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f77f5f5bf3deeba32bb9812c32c6ec90.exe
Size

1.1MB
MD5

f77f5f5bf3deeba32bb9812c32c6ec90
SHA1

a0a7b92407b5f9285c254bac521ff240d679c3c6
SHA256

c890fbf808d07ddbea0e17907f16d5280a955cce7157a8ae38ac960e7e4b6f43
SHA512

312de5736fc4c7bcd63a060918c4e6d032e48608851a050927931278426e334db96a4253aeefc8df80ea8ee4d283b7dffb934a91863f7eb2b2e8fda921d532a3
SSDEEP

3072:MNvHjO8z+dmqAnT3esK+RbSsuzr86mHYCmozoihpSh6PIoXBJV3cB6KDRb:MVH1fB/g8b2ihpS4jVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f77f5f5bf3deeba32bb9812c32c6ec90.exe

Files

NEAS.f77f5f5bf3deeba32bb9812c32c6ec90.exe
.dll windows:6 windows x86

2f6cd2f442df4c2e229bc1391d7c2eb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler4_common
memcpy
memset
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
OpenFile
CompareStringA
GetCurrentThreadId
CloseHandle
GetDriveTypeA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
lstrcmpiA
lstrcmpA
LocalHandle
WinExec
lstrlenA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalFindAtomA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GlobalReAlloc
GlobalSize
GlobalDeleteAtom
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
GetCurrentThread
IsWow64Process

advapi32

RegQueryValueA
RegOpenKeyExA
OpenProcessToken
RegOpenUserClassesRoot
OpenThreadToken
SetThreadToken
RegCloseKey

user32

EnumThreadWindows
DialogBoxParamA
GetPropA
SendDlgItemMessageA
GetDlgItemTextA
RemovePropA
EndDialog
LoadStringA
MessageBoxA
SetPropA
SetDlgItemTextA
IsWindowVisible
GetDlgItem
UnregisterClassA
RegisterClassA
EnumClipboardFormats
PeekMessageA
IsWindow
CloseClipboard
CharUpperBuffA
RegisterClipboardFormatA
GetClipboardFormatNameA
FreeDDElParam
PackDDElParam
GetWindowLongA
DefWindowProcA
CreateWindowExA
SetWindowLongA
SendMessageA
DestroyWindow
SetTimer
KillTimer
PostMessageA
UnpackDDElParam
GetClipboardData
SetClipboardData
GetDC
ReleaseDC
OpenClipboard
GetWindowThreadProcessId
IsClipboardFormatAvailable

gdi32

CopyEnhMetaFileA
GetEnhMetaFileBits
GetWinMetaFileBits
DeleteEnhMetaFile
DeleteObject
GetBitmapBits
GetObjectA
CreateBitmap
SetBitmapDimensionEx
SetBitmapBits
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
StretchBlt
SelectObject
GetEnhMetaFileHeader
SetWindowExtEx
PlayEnhMetaFileRecord
GetStockObject
StretchDIBits
RealizePalette
SelectPalette
CreatePalette
SetViewportExtEx
PlayMetaFileRecord
EnumEnhMetaFile
GetDIBits
EnumMetaFile
RestoreDC
IntersectClipRect
SaveDC
DeleteDC
CreateCompatibleDC
SetViewportOrgEx
SetMapMode
LPtoDP
DeleteMetaFile
CopyMetaFileA
CloseMetaFile
CreateMetaFileA
GetBitmapDimensionEx
SetEnhMetaFileBits
SetWindowOrgEx
SetWinMetaFileBits
Rectangle
GetMetaFileBitsEx
SetMetaFileBitsEx

mpr

WNetGetConnectionA
WNetAddConnectionA

ntdll

EtwTraceMessage

Exports

Exports

BmChangeData
BmClone
BmCopy
BmDraw
BmEnumFormat
BmEqual
BmGetData
BmQueryBounds
BmRelease
BmSaveToStream
CheckNetDrive
ConnectDlgProc
DefCreate
DefCreateFromClip
DefCreateFromFile
DefCreateFromTemplate
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefLoadFromStream
DibChangeData
DibClone
DibCopy
DibDraw
DibEnumFormat
DibEqual
DibGetData
DibQueryBounds
DibRelease
DibSaveToStream
DocWndProc
ErrActivate
ErrClose
ErrCopyFromLink
ErrExecute
ErrGetUpdateOptions
ErrObjectConvert
ErrObjectLong
ErrQueryOpen
ErrQueryOutOfDate
ErrQueryProtocol
ErrReconnect
ErrSetBounds
ErrSetData
ErrSetHostNames
ErrSetTargetDevice
ErrSetUpdateOptions
ErrShow
ErrUpdate
GenChangeData
GenClone
GenCopy
GenDraw
GenEnumFormat
GenEqual
GenGetData
GenQueryBounds
GenRelease
GenSaveToStream
GenSetData
GetTaskVisibleWindow
LeActivate
LeChangeData
LeClone
LeClose
LeCopy
LeCopyFromLink
LeCreateInvisible
LeDraw
LeEnumFormat
LeEqual
LeExecute
LeGetData
LeGetUpdateOptions
LeObjectConvert
LeObjectLong
LeQueryBounds
LeQueryOpen
LeQueryOutOfDate
LeQueryProtocol
LeQueryType
LeReconnect
LeRelease
LeSaveToStream
LeSetBounds
LeSetData
LeSetHostNames
LeSetTargetDevice
LeSetUpdateOptions
LeShow
LeUpdate
MfCallbackFunc
MfChangeData
MfClone
MfCopy
MfDraw
MfEnumFormat
MfEqual
MfGetData
MfQueryBounds
MfRelease
MfSaveToStream
ObjQueryName
ObjQuerySize
ObjQueryType
ObjRename
OleActivate
OleClone
OleClose
OleCopyFromLink
OleCopyToClipboard
OleCreate
OleCreateFromClip
OleCreateFromFile
OleCreateFromTemplate
OleCreateInvisible
OleCreateLinkFromClip
OleCreateLinkFromFile
OleDelete
OleDraw
OleEnumFormats
OleEnumObjects
OleEqual
OleExecute
OleGetData
OleGetLinkUpdateOptions
OleIsDcMeta
OleLoadFromStream
OleLockServer
OleObjectConvert
OleQueryBounds
OleQueryClientVersion
OleQueryCreateFromClip
OleQueryLinkFromClip
OleQueryName
OleQueryOpen
OleQueryOutOfDate
OleQueryProtocol
OleQueryReleaseError
OleQueryReleaseMethod
OleQueryReleaseStatus
OleQuerySize
OleQueryType
OleReconnect
OleRegisterClientDoc
OleRelease
OleRename
OleRenameClientDoc
OleRequestData
OleRevertClientDoc
OleRevokeClientDoc
OleSaveToStream
OleSavedClientDoc
OleSetBounds
OleSetColorScheme
OleSetData
OleSetHostNames
OleSetLinkUpdateOptions
OleSetTargetDevice
OleUnlockServer
OleUpdate
PbCopyToClipboard
PbCreate
PbCreateFromClip
PbCreateFromFile
PbCreateFromTemplate
PbCreateInvisible
PbCreateLinkFromClip
PbCreateLinkFromFile
PbDraw
PbEnumFormats
PbGetData
PbLoadFromStream
PbQueryBounds
SetNetName
SetNextNetDrive
SrvrWndProc
WEP

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f6cd2f442df4c2e229bc1391d7c2eb9

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

gdi32

mpr

ntdll

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 143KB - Virtual size: 143KB

.text
Size: 69KB - Virtual size: 68KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 143KB - Virtual size: 143KB