NEAS[.]9244ed20d7fb0ac8b2dd75e6ab0e2520[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9244ed20d7fb0ac8b2dd75e6ab0e2520.exe
Size

1.5MB
MD5

9244ed20d7fb0ac8b2dd75e6ab0e2520
SHA1

d8d8b725d12f609829e8207b63759b30a7ec6485
SHA256

9845b08dbc97decb4586b1f2722a3a9a49de41c976472e3bde18ea858c251d9c
SHA512

8f9665a2b8504df16dc8da0bb2f9d09218e84d05c7a881a5eaf8863927aab3048c38e5b3115540fffcf1309201144199727f563e5c0fb34fc91d51ed6f81fdba
SSDEEP

24576:rJ63lFLEMnDuq8Dby8BVLNzNveeCrrmUZKqH6NRsWONV6Oz0aQAye/CUGLV1DkTG:2dN8DhGrcqHHSLVCtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9244ed20d7fb0ac8b2dd75e6ab0e2520.exe

Files

NEAS.9244ed20d7fb0ac8b2dd75e6ab0e2520.exe
.exe windows:4 windows x86

b9437fa110e91e2b48588b9470347a9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmFormatTagEnumW
acmFormatTagEnumA
acmMetrics
acmStreamClose
acmGetVersion

winmm

mciGetDeviceIDW
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
waveOutGetVolume
mciGetDeviceIDFromElementIDW

mpr

WNetCancelConnectionW
WNetOpenEnumA
WNetCloseEnum
WNetCancelConnectionA

comctl32

ImageList_Write
ImageList_SetOverlayImage
InitCommonControlsEx

kernel32

HeapFree
HeapAlloc
RtlUnwind
GetModuleHandleA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLastError
GetProcAddress
GetLocaleInfoA
CreateMutexA
ClearCommError
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentThread
GetCurrentProcess
CloseHandle

user32

ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetFocus
RegisterClassA
SetKeyboardState
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TabbedTextOutA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
VkKeyScanA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MoveWindow
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyA
LockWindowUpdate
LoadStringA
LoadKeyboardLayoutA
LoadIconA
LoadCursorFromFileA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
RemovePropA
IsChild
IsCharUpperA
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyState
GetKeyNameTextA
GetKeyboardType
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoA
GetCaretPos
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExA
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
IsClipboardFormatAvailable
RegisterClipboardFormatA
ActivateKeyboardLayout
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharLowerBuffA
CharNextA
CharNextW
CharToOemA
CharUpperBuffA
CheckMenuItem
ChildWindowFromPoint
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CopyImage
CloseClipboard
ClientToScreen
SetForegroundWindow

gdi32

CreatePenIndirect
CreateHalftonePalette
CreateFontIndirectA
CreatePalette
CreateICA
CreateEnhMetaFileA
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EnumFontFamiliesA
ExcludeClipRect
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDeviceCaps
GetDIBColorTable
GetDIBits
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
CreateEllipticRgn
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polygon
Polyline
PtInRegion
RealizePalette
Rectangle
RectVisible
ResizePalette
RestoreDC
SaveDC
SelectClipPath
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
CreateDIBSection
CreateDIBitmap
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineRgn
CloseEnhMetaFile
GetEnhMetaFileHeader
BitBlt
TranslateCharsetInfo
StretchDIBits
StartPage
StartDocA
SetWinMetaFileBits
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetPaletteEntries
SetMapMode
SetEnhMetaFileBits
SetDIBitsToDevice
SetDIBits

advapi32

EqualSid
FreeSid
OpenProcessToken
OpenThreadToken
AllocateAndInitializeSid
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation

shell32

Shell_NotifyIconA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA

ole32

CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoGetClassObject
CoCreateInstance
IsAccelerator
OleDraw
OleRun
OleSetMenuDescriptor
ProgIDFromCLSID
StringFromCLSID
CoTaskMemAlloc

Sections

.text
Size: 412KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata1
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rn95
Size: 999KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b9437fa110e91e2b48588b9470347a9c

Headers

File Characteristics

Imports

msacm32

winmm

mpr

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 412KB - Virtual size: 408KB

.rdata1 Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 76KB - Virtual size: 76KB

.rn95 Size: 999KB - Virtual size: 1000KB

.text
Size: 412KB - Virtual size: 408KB

.rdata1
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 76KB - Virtual size: 76KB

.rn95
Size: 999KB - Virtual size: 1000KB