NEAS[.]4402360b2607208459b5a9b6026dc110[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4402360b2607208459b5a9b6026dc110.exe
Size

774KB
MD5

4402360b2607208459b5a9b6026dc110
SHA1

32a18828ae5291d5edc6c1d955c672946d285ce1
SHA256

617d3d82c052562287696564a4ebb425c30fcbf36306def790da9832a13fa618
SHA512

a013a14c4987339493325ec08ab249c1759a223a73528f9153c12fa7405384cee343d8ffd8156902f388b8de639da46913462fd7f3f31c712b444f29f6de44ad
SSDEEP

12288:USwwn4oOZcaQYn3htObJmOo3/UuSxekt0YAwge:URe4oG3hOU3/U/xekt0YAwge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4402360b2607208459b5a9b6026dc110.exe

Files

NEAS.4402360b2607208459b5a9b6026dc110.exe
.exe windows:6 windows x86

bb7a04515df8613e19d74d4974eb8b56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
OutputDebugStringA
OpenThread
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
CreateNamedPipeA
CreateEventA
ReadFile
WaitForMultipleObjects
GetOverlappedResult
WaitForSingleObject
WriteFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocalTime
CreateMutexA
CloseHandle
LocalFree
GetVersionExA
CreateProcessW
GetCurrentDirectoryW
DeleteFileW
CreateFileW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
SetLastError
MultiByteToWideChar
GetFullPathNameA
WideCharToMultiByte

gdi32

SetTextColor
SetBkMode
CreateSolidBrush
GetObjectA
CreateFontIndirectA
SetBkColor

user32

CreateWindowExW
SetWindowTextW
SetWindowTextA
GetDlgItem
SendMessageA
EndDialog
CallWindowProcA
GetClassInfoExA
GetSysColorBrush
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetTimer
ShowWindow
UpdateWindow
PostQuitMessage
GetParent
MoveWindow
GetDesktopWindow
EnumChildWindows
GetWindowLongA
PostMessageA
DestroyWindow
ClientToScreen
TrackMouseEvent
MessageBoxA
CreateWindowExA
GetClientRect
GetWindowRect
SetCursor
LoadCursorA
EnableWindow
GetSysColor
GetDlgCtrlID
RegisterDeviceNotificationA
SetWindowLongA
UnregisterDeviceNotification
GetWindowTextA
DestroyIcon
DialogBoxParamA
LoadIconA
GetWindowTextW

msvcrt

_wcslwr
_strlwr
_iob
__getmainargs
_stricmp
strncpy
memcpy
malloc
_strdup
sprintf
_snprintf
memset
calloc
free
_cexit
_exit
_errno
_XcptFilter
_ismbblead
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
realloc
wctomb
_itoa
exit
_controlfp
?terminate@@YAXXZ
isspace
__set_app_type
strncat
_fdopen
_open_osfhandle
fclose
fwrite
getenv
strtok
strncmp
_snwprintf
fprintf
_endthread
_beginthread
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
sscanf
_acmdln
isleadbyte

comctl32

ord17

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

CryptDestroyKey
CryptGenKey
CryptAcquireContextW
ConvertSidToStringSidA
CryptReleaseContext
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
OpenProcessToken
GetTokenInformation
ConvertStringSidToSidA

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

shell32

ShellExecuteExW
SHCreateDirectoryExW

ole32

CoCreateGuid

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�ޅ��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb7a04515df8613e19d74d4974eb8b56

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

msvcrt

comctl32

comdlg32

advapi32

setupapi

shell32

ole32

Sections

.text Size: 703KB - Virtual size: 703KB

.data Size: 31KB - Virtual size: 33KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 11KB - Virtual size: 10KB

�ޅ��u� Size: 16KB - Virtual size: 20KB

.text
Size: 703KB - Virtual size: 703KB

.data
Size: 31KB - Virtual size: 33KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 11KB - Virtual size: 10KB

�ޅ��u�
Size: 16KB - Virtual size: 20KB