NEAS[.]981b430dc7404a31aa094b585e2a58c0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.981b430dc7404a31aa094b585e2a58c0.exe
Size

718KB
MD5

981b430dc7404a31aa094b585e2a58c0
SHA1

dd4d437352084da4f077442e335db8f96aa4b88d
SHA256

f154f6416c400bc4acb248aebc576ce3828350f3d644cb13bf52fb220958d2ea
SHA512

b28012133c7feff286963420e333cfd1ad0e3e97aacf1cef2bb7c0c44587dde44a5b41285584a259ad6305bad3d4a811f732bbfa7af0285a0cc1ecaaa119e2f0
SSDEEP

12288:fLrT2z1jbwBbpSlmR4+15YpPi0RvhomqWa:DrwwBbp9WpPiUvKmqWa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.981b430dc7404a31aa094b585e2a58c0.exe

Files

NEAS.981b430dc7404a31aa094b585e2a58c0.exe
.exe windows:5 windows x86

c7a6c866e05e345547695bc60bde2bff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

xmllite

CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage

winmm

PlaySoundW

comctl32

ImageList_Create
ImageList_Add
ImageList_Draw
InitCommonControlsEx
ImageList_Destroy
ImageList_LoadImageW

opengl32

glGetBooleanv
glLightf
glLightfv
glEnable
glPushMatrix
glTranslatef
glRotatef
glMaterialfv
glPopMatrix
glBegin
glEnd
glNormal3fv
glVertex3fv
wglMakeCurrent
wglDeleteContext
glMatrixMode
glDepthFunc
glCullFace
glPolygonMode
glBlendFunc
glLoadIdentity
glViewport
glClearColor
glClear
glFinish
wglCreateContext

glu32

gluPerspective

gdiplus

GdiplusStartup
GdiplusShutdown

kernel32

LockResource
GetSystemTime
CreateMutexW
GetLastError
CloseHandle
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
FindFirstFileW
FindClose
GetWindowsDirectoryW
SetCurrentDirectoryW
OpenMutexW
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntW
CreateEventW
GlobalAlloc
GlobalFree
WideCharToMultiByte
CreateFileW
SetEvent
WaitForSingleObject
ReadFile
ResetEvent
CreateNamedPipeW
GetPrivateProfileStringW
DisconnectNamedPipe
WaitForMultipleObjects
GetOverlappedResult
LoadResource
GlobalUnlock
ExpandEnvironmentStringsW
WriteFile
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineW
CreateThread
ResumeThread
ExitThread
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
HeapSize
GetStringTypeW
GetUserDefaultLCID
GetCurrentDirectoryW
GetModuleHandleW
GetModuleFileNameW
FlushFileBuffers
GlobalLock
FindResourceExW
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
SetStdHandle
IsProcessorFeaturePresent
GetOEMCP
IsValidCodePage
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapCreate
ExitProcess
Sleep
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
LoadLibraryW
HeapReAlloc
WriteConsoleW
SetEndOfFile
ConnectNamedPipe
GetProcessHeap

user32

CheckDlgButton
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
EnableWindow
SetWindowTextW
MapWindowPoints
GetDlgItem
GetWindowRect
GetSysColor
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
MoveWindow
DestroyWindow
DialogBoxIndirectParamW
SetScrollPos
ShowScrollBar
IsDlgButtonChecked
GetDlgItemTextW
DrawTextExW
FillRect
GetClientRect
SetWindowPos
ScrollWindowEx
InvalidateRect
PtInRect
GetScrollInfo
EndPaint
BeginPaint
DefWindowProcW
SetWindowLongW
UpdateWindow
LoadBitmapW
ReleaseDC
GetDC
SetScrollInfo
RegisterClassExW
CreateWindowExW
LoadCursorW
GetWindowLongW
GetParent
SetFocus
GetFocus
EndDialog
OffsetRect
GetSystemMetrics
IsWindow
KillTimer
GetWindowPlacement
LoadStringW
LoadIconW
GetClassNameW
MessageBoxW
SetWindowPlacement
SystemParametersInfoW
EnumWindows
IntersectRect
SetTimer
PostQuitMessage
CreatePopupMenu
AppendMenuW
GetCursorPos
TrackPopupMenu
PostMessageW
DestroyMenu
InflateRect
IsIconic
SetForegroundWindow
IsWindowVisible

gdi32

GetObjectW
CreateDIBSection
SetPixelFormat
CreatePen
GdiAlphaBlend
MoveToEx
LineTo
SetStretchBltMode
StretchDIBits
RoundRect
SetTextColor
StretchBlt
SetBkMode
BitBlt
SetLayout
GetLayout
GdiFlush
CreateFontW
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
ChoosePixelFormat
CreateSolidBrush
DeleteObject

winspool.drv

EnumPrintersW

comdlg32

GetOpenFileNameW

advapi32

CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
CryptGetHashParam

shell32

ShellExecuteW

ole32

CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c7a6c866e05e345547695bc60bde2bff

Headers

DLL Characteristics

File Characteristics

Imports

xmllite

winmm

comctl32

opengl32

glu32

gdiplus

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 150KB - Virtual size: 150KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 23KB - Virtual size: 31KB

.rsrc Size: 154KB - Virtual size: 153KB

.text Size: 357KB - Virtual size: 360KB

.text
Size: 150KB - Virtual size: 150KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 23KB - Virtual size: 31KB

.rsrc
Size: 154KB - Virtual size: 153KB

.text
Size: 357KB - Virtual size: 360KB