NEAS[.]291e3fe82e7006be433b19b04ecfdec0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.291e3fe82e7006be433b19b04ecfdec0.exe
Size

196KB
MD5

291e3fe82e7006be433b19b04ecfdec0
SHA1

b8efa27c1269f61094b8362aac61d9498829af0f
SHA256

146a660c26a23bc03a462b86a67dce0314221a28b543b8becae55f829547df39
SHA512

c70340a3b92a295ccff557ea4421de5364b3dc30195bf9d47ef9fbaf302aaa322a08ef724ab4eaba2da57e6e8df8f45dffc7a2b915546131b41b6a3f7ca45b54
SSDEEP

3072:J3Vx99f9jsGzCrS9LULuWke8VK/ZOr/HfnuA14vpfLqHdHHWTC9uqNc2Cvga:Jlxv5r6S9LoJke8VwZer14xfLq9HDnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.291e3fe82e7006be433b19b04ecfdec0.exe

Files

NEAS.291e3fe82e7006be433b19b04ecfdec0.exe
.dll windows:4 windows x86

968b906a005e11b94230587c0822248c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateTimerQueue
GetStringTypeExW
InterlockedExchangeAdd
GetNumberFormatW
WriteFileEx
VirtualAllocEx
VirtualAlloc
SetConsoleInputExeNameA
ReadFileScatter
AssignProcessToJobObject
HeapWalk
GetProcessHeaps
GetConsoleTitleW
Sleep
ConsoleMenuControl
GetTimeZoneInformation
TransactNamedPipe
SetDefaultCommConfigA
CreateIoCompletionPort
GetPrivateProfileStructW
QueryDosDeviceA
SetSystemPowerState
VirtualFree
CmdBatNotification
CreateMailslotA
ReadConsoleOutputW
GetConsoleMode
FreeLibrary
EnumTimeFormatsA
GetHandleInformation
LoadLibraryW
CloseHandle
SetConsoleFont
LCMapStringW
GetNumberOfConsoleInputEvents
SetFileAttributesW
CreateConsoleScreenBuffer
GetCommandLineA
WaitForMultipleObjects
Heap32ListNext
GlobalUnlock
SetPriorityClass
GetModuleHandleA
GetProcAddress
SizeofResource
SetProcessWorkingSetSize
WriteConsoleOutputW
GetConsoleCommandHistoryLengthW
FindNextVolumeMountPointW
GetCurrentThreadId
ReleaseMutex
GetDefaultCommConfigA
GetACP
GetCommMask
IsBadHugeWritePtr
ReadConsoleOutputA
GetLogicalDriveStringsA
GetPrivateProfileIntW
FormatMessageA
GetVersion
GetConsoleFontInfo
PeekConsoleInputW
WaitForSingleObject
GetCommandLineW
GetConsoleAliasesLengthA
SetThreadAffinityMask
FreeResource
EnumCalendarInfoW
CommConfigDialogA
GetSystemDefaultLCID
IsDBCSLeadByte
SetConsoleTextAttribute
GlobalFree
SetConsolePalette
FillConsoleOutputAttribute
SetHandleInformation
WriteConsoleInputW
FatalExit
HeapAlloc
GetNumberOfConsoleFonts
GetCommTimeouts
GetConsoleOutputCP
ReadFileEx
GetTickCount
GetPrivateProfileSectionNamesA
LoadLibraryA
GetProfileSectionW
GetProfileStringW
EnumDateFormatsExW
GetCurrentThread
EnumDateFormatsA
GetThreadLocale
GetConsoleAliasExesW
FlushViewOfFile
GetSystemTime
GetCompressedFileSizeW
GetLocalTime
IsValidLocale
WriteConsoleOutputCharacterA
SetConsoleTitleA
GetCurrentProcessId
SetComputerNameA
GetStdHandle
GetSystemDefaultLangID
GetComputerNameA
GetProcessHeap
GetOEMCP
GetCurrentProcess
GetQueuedCompletionStatus
GetCompressedFileSizeA
QueueUserWorkItem
FindClose
TerminateJobObject
FindResourceExA

user32

GetMessagePos
WINNLSEnableIME
CreateDialogIndirectParamW
GetCapture
LoadCursorA
GetKeyboardLayoutList
GetActiveWindow
LoadIconA
CloseWindowStation
EnumWindowStationsW
SetWindowContextHelpId
LookupIconIdFromDirectory
CreateDialogIndirectParamA
PostQuitMessage
OpenInputDesktop
SetDlgItemTextW
FillRect
PackDDElParam
GetFocus
IsCharLowerW
DdeSetUserHandle
BlockInput
GetAltTabInfoW
GetMenuItemRect
SetMenuInfo
GetWindowThreadProcessId
GetMessageTime
FreeDDElParam
IMPGetIMEA
IsChild
PtInRect
SetWindowLongA
GetDesktopWindow
SetWindowPlacement
CallMsgFilterA
GetWindowLongW
keybd_event
GetUpdateRgn
DrawCaption
SetPropA
AppendMenuA
SystemParametersInfoA
wsprintfA
GetWindowInfo
LoadAcceleratorsA
GetCursor
GetForegroundWindow
DdeDisconnect
SetCursorPos
SetDeskWallpaper
GetClassInfoExA
ReuseDDElParam
CharNextW
UpdateWindow
DdeFreeDataHandle
GetIconInfo
RegisterClipboardFormatA
CloseDesktop
SetClipboardViewer
CallWindowProcA
DispatchMessageA
FindWindowA
CreateCursor
SetMenu
InvalidateRgn

gdi32

GetTextAlign
CreateEnhMetaFileW
CombineRgn
DeviceCapabilitiesExW
CreateCompatibleDC
EndDoc
ExtTextOutA
ExtSelectClipRgn
CreateFontA
FrameRgn
GetGlyphIndicesW
GetWindowOrgEx
GetEnhMetaFileBits
GetBitmapBits
Ellipse
ExtTextOutW
AbortPath
CreateFontW
WidenPath
GdiPlayDCScript
EnumMetaFile
CreateScalableFontResourceA
FixBrushOrgEx
CreateScalableFontResourceW
SetROP2
GetEnhMetaFileW
SetGraphicsMode
FloodFill
CreateSolidBrush
CreateCompatibleBitmap
GetStockObject
SelectObject
SetDIBitsToDevice
EnumICMProfilesW
Rectangle
GetMetaRgn
GetPaletteEntries
GetDCPenColor
CreateColorSpaceW
StretchDIBits
SetRectRgn
GetRgnBox
Pie
SetDIBColorTable
DeleteDC
SetPixelFormat
AnimatePalette
GetObjectA
PlayMetaFileRecord
SetTextCharacterExtra

winspool.drv

OpenPrinterA
DocumentPropertiesA
DeletePrinterDataA
EnumPortsW
ord215
ord256

opengl32

glNormal3iv
glRasterPos4s
glGetIntegerv
glMultMatrixd
glDepthMask
glIsList
glRasterPos4fv
glEndList
glBindTexture
glFlush
wglGetCurrentContext
glMaterialfv
glLightfv
glColor4uiv
glTexGenfv
glDrawArrays
wglSwapMultipleBuffers
glNormal3d
glNormal3dv
glEvalCoord1d
glDepthFunc
wglShareLists
GlmfPlayGlsRecord
wglSetPixelFormat
glTexGeniv
glEdgeFlagPointer
glVertex3iv
glColor3f
glGetMapdv
glColor3ubv
wglCreateLayerContext
glEvalCoord2d
glTexGendv
glColor4d
glIndexPointer
glRasterPos2iv
glTexCoord3sv
glGetTexEnviv
glGetTexLevelParameteriv
glDeleteLists
wglMakeCurrent
glAlphaFunc
glPixelTransferf
glTranslatef
glColor4dv
wglUseFontOutlinesW
glPolygonStipple
glScissor
glVertex4iv
glIsEnabled
glTexCoord1fv
glGetMapiv
glIndexf
glMap1d
glTexCoord2fv
glInitNames
glVertex4i
glColor3sv
glTexGend
glColor4bv
glMaterialf
glRectdv
glLineStipple
glStencilFunc
glGetString
glGetTexGeniv
glRasterPos3iv
glIndexub
glRasterPos2s
glVertex2i
wglChoosePixelFormat
glColor4us
glLogicOp
glEvalCoord1fv
glFogfv
glRasterPos4f
glVertex4fv
glTexCoord4dv
glVertex4dv
glTexCoord4d
glVertex2s
glAreTexturesResident
glTexCoord3i
glMultMatrixf
glRasterPos4i
glTexGenf
glVertex2d
glTexCoord1d
glEvalMesh1
wglGetProcAddress
glStencilMask
glTexEnviv
glPixelStoref
glPushAttrib
glGetMapfv
glEvalCoord1f
wglDeleteContext
glLoadMatrixd
glTexCoord3dv
glColorMask
glVertex3f
glTexCoord1f
glColor3bv
wglGetCurrentDC
glClearIndex
glFogi
glTexCoord1dv
glGetTexParameterfv
glIndexi
wglCreateContext
wglUseFontOutlinesA
glListBase

shlwapi

StrCmpNIA
StrRStrIW
StrRChrIW

shell32

WOWShellExecute
DragQueryFileW
SHInvokePrinterCommandW
SHAddToRecentDocs
StrNCmpIW
StrNCmpA
ExtractAssociatedIconExA
StrNCmpW
ExtractIconA
SHGetDataFromIDListA

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_mbschr
_mbsnbcpy
fputs
_strcmpi
__setlc_active
_eof
feof
_adj_fptan
ftell
_wstrtime
_seh_longjmp_unwind
_wspawnv
_execl
_chdrive
div
_mkdir
_findfirst
_memicmp
_mbctolower
_wexecvp
_pwctype
ferror
_mbsncoll
_access
_mbsset
fgetpos
_except_handler2
_getmaxstdio
_isctype
_wchmod
__RTCastToVoid
mbstowcs
fseek
_commit
ungetwc
raise
_CIfmod
fputc
_ftime
_wremove
_ismbcl0
_lsearch
__badioinfo
strrchr
_filbuf
_ui64tow
__mb_cur_max
_adj_fprem
fread
fprintf
_HUGE
_pipe
atoi
_CIsqrt
_wtoi64
fclose
_mbsnextc
atan
printf
_mbclen
iswspace
__p___mb_cur_max
_clearfp
fwprintf
_wspawnle
is_wctype
_lock
_CIlog10
fwrite
perror
_fgetwchar
strerror
rand
fsetpos
__pioinfo
memset
_ismbclower
_wcsicmp
_mbctokata
_abnormal_termination
sprintf
_spawnvp
_wcsnset
fopen

Exports

Exports

Arlslkowv
Berpjzpu
Bgregpu
Bhpe
Cpzkoys
Dteeaa
Eemqv
Erqogcz
Esrkic
Eumoes
Fdapy
Fgiem
Fqkzrmj
Gepfcbj
Ggpcedkl
Gqmjfg
Gwuxoln
Hrwbl
Igbkls
Igqjnsbzd
Iivjwq
Lxnjcr
Msushl
Mugfd
Omhfuzk
Qauptrpt
Rvfdtfys
Sowix
Tasfzifvky
Tndrocok
Tycgnypnw
Vcvsw
Wmuv
Wrwrpbq
Ypujfaiqgx
Yruvnutvn
Ytnn
Zsmbbh

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

968b906a005e11b94230587c0822248c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

opengl32

shlwapi

shell32

msvcrt

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 154KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 9KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 156KB - Virtual size: 154KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 9KB

.reloc
Size: 8KB - Virtual size: 6KB