NEAS[.]654ed5fb8afe8015682aee2ceee76340[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.654ed5fb8afe8015682aee2ceee76340.exe
Size

657KB
MD5

654ed5fb8afe8015682aee2ceee76340
SHA1

b6313838b81ed5fd3e8f4e966d44b972b0570889
SHA256

294ad80aa369025ea47da4f7dce4171fc901a9bb29ce4048692a81c3cb84b78e
SHA512

a1214df7e1fe85a58787b4e2b494f0acb30531de092e389c4282a1914f006f453d5643d7ed12732d094887451cc7ce9624358727a36621444161de251fa5a986
SSDEEP

12288:e7ag365oxv3NvRAInt+cSw6cdTRpoooOzzzT6asVObu:eBq5oxFpAIt2yRzzzT6aCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.654ed5fb8afe8015682aee2ceee76340.exe

Files

NEAS.654ed5fb8afe8015682aee2ceee76340.exe
.exe windows:5 windows x86

47fe022f3a5b4bc5b7c21ed73daf06c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
CreateThread
FindResourceExW
FindResourceW
LoadResource
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
RtlUnwind
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
ExitProcess
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GetTickCount
GlobalLock
FormatMessageW
HeapFree
HeapAlloc
WriteFile
GetSystemDirectoryW
SizeofResource
FileTimeToSystemTime
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
RaiseException
LockResource
GetFileTime
CloseHandle
GetWindowsDirectoryW
GetSystemTime
CreateFileA
DeviceIoControl
SetFilePointer
FreeLibrary
GetModuleHandleW
LoadLibraryW
GetProcAddress
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
Sleep
GetVersionExW
HeapDestroy
LeaveCriticalSection
HeapCreate
CompareStringW
lstrcmpW
lstrlenW
FlushInstructionCache
GetLastError
SetLastError
EnterCriticalSection
lstrcmpiW
DeleteCriticalSection
GetFileSize

user32

FillRect
GetMenuItemID
LoadImageW
SetCapture
PostMessageW
DrawTextW
KillTimer
GetKeyState
GetSubMenu
LoadStringA
DeleteMenu
GetFocus
DialogBoxParamW
GetParent
LoadCursorW
CallNextHookEx
MessageBeep
IsWindowEnabled
RegisterWindowMessageW
GetClientRect
SetFocus
DrawEdge
GetMenuItemInfoW
DispatchMessageW
PeekMessageW
TranslateMessage
UnregisterClassA
CloseClipboard
GetClassInfoW
SetRect
EmptyClipboard
ChangeClipboardChain
EnumChildWindows
OpenClipboard
RegisterClassW
SetClipboardViewer
GetClipboardOwner
GetWindowDC
CharNextW
PostQuitMessage
MonitorFromPoint
GetMessageW
IsMenu
GetWindowRect
ScreenToClient
SetTimer
TranslateAcceleratorW
GetWindowTextLengthW
SetCursor
EndPaint
DestroyWindow
WindowFromPoint
SetRectEmpty
ModifyMenuW
BeginPaint
PtInRect
GetClassInfoExW
CharLowerW
GetDC
GetCapture
wsprintfW
GetSystemMetrics
GetWindow
GetWindowThreadProcessId
GetMessagePos
DefWindowProcW
CallWindowProcW
GetMonitorInfoW
SetMenuItemInfoW
SetWindowPlacement
DrawFrameControl
SetWindowTextW
DrawFocusRect
LoadAcceleratorsW
InflateRect
GetForegroundWindow
GetMenu
RegisterClassExW
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
GetAsyncKeyState
CheckMenuRadioItem
InvalidateRect
LoadMenuW
BringWindowToTop
GetWindowLongW
AppendMenuW
GetWindowTextW
SystemParametersInfoW
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
SetMenu
CreatePopupMenu
GetSysColorBrush
FrameRect
CreateDialogParamW
GetActiveWindow
GetMenuItemCount
IsWindow
RemoveMenu
CreateWindowExW
SetMenuDefaultItem
InsertMenuW
SetWindowsHookExW
AdjustWindowRectEx
UnhookWindowsHookEx
MessageBoxW
ReleaseCapture
IsWindowVisible
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
UpdateWindow
EnableWindow
DestroyMenu
GetDlgCtrlID

gdi32

BitBlt
PatBlt
SetTextColor
DeleteDC
CreateDIBSection
CreateFontIndirectW
SetBrushOrgEx
SetBkColor
CreateBitmap
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetTextExtentPointW
CreateFontW
GetObjectW
CreatePatternBrush
CreatePen
TextOutW
GetStockObject
CreateSolidBrush

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW

ole32

WriteClassStg
CreateILockBytesOnHGlobal
CoDisconnectObject
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
StgOpenStorageOnILockBytes
StgCreateDocfile
CoUninitialize
CoCreateInstance
OleGetAutoConvert

shell32

ShellExecuteW

oleaut32

VariantTimeToSystemTime
VariantClear
CreateErrorInfo
SetErrorInfo
SysAllocString
VarUI4FromStr
SysFreeString
SystemTimeToVariantTime

shlwapi

PathFileExistsW

comctl32

ImageList_Draw
ImageList_Destroy
ImageList_DrawIndirect
_TrackMouseEvent
InitCommonControlsEx
ImageList_LoadImageW
ImageList_GetImageCount

wininet

InternetCloseHandle
InternetGetConnectedState
HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetOpenW

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47fe022f3a5b4bc5b7c21ed73daf06c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shell32

oleaut32

shlwapi

comctl32

wininet

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 10KB - Virtual size: 18KB

.rsrc Size: 440KB - Virtual size: 440KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 10KB - Virtual size: 18KB

.rsrc
Size: 440KB - Virtual size: 440KB

.reloc
Size: 14KB - Virtual size: 13KB