NEAS[.]dc146eebe350d882d7d03ff1c9f9e020[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dc146eebe350d882d7d03ff1c9f9e020.exe
Size

213KB
MD5

dc146eebe350d882d7d03ff1c9f9e020
SHA1

c99fb7493307820339842f4126a8cf4b522b56b9
SHA256

091daa6dc3e222e2f82ed8b33112c0ce9c5bfdcb66e9e2e171b24a638b8ca2b9
SHA512

e702a16e7212a4157ea788c326a5d1d73adae298699c64d0741f10284d76193c5307cb773571105308a114e76a2d40a002da633c62a9f6cb95ae026c21cb652c
SSDEEP

6144:ZN+TNmQ1J+tl7OwGWvv6I4RLgup5306QL1:jedQ64vqg606G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc146eebe350d882d7d03ff1c9f9e020.exe

Files

NEAS.dc146eebe350d882d7d03ff1c9f9e020.exe
.exe windows:4 windows x86

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetDiskFreeSpaceA
GetProcAddress
GetNamedPipeInfo
InitializeCriticalSection
MulDiv
DosDateTimeToFileTime
GetTempFileNameA
OpenMutexW
CreateEventA
GetLongPathNameW
OpenFile
GetACP
EnumDateFormatsA
GetCurrentProcessId
CreateMailslotW
GetSystemDirectoryA
CopyFileA
ExpandEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoA
GetStartupInfoW
GlobalGetAtomNameW
GetUserDefaultLangID
GetPriorityClass
SetCalendarInfoW
FlushFileBuffers
GetEnvironmentVariableW
LocalAlloc
EnumTimeFormatsA
CompareStringA
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetNumberFormatW
Beep
FindResourceA
GetCommandLineA
GetLocaleInfoW
GetCalendarInfoW
FileTimeToDosDateTime
LocalFree
WaitForMultipleObjects
GetModuleHandleA
SetComputerNameW
IsBadStringPtrW
ConnectNamedPipe
GetThreadPriority
GlobalFindAtomA
CreateFileA
GetSystemDefaultLCID
FreeResource
FindResourceW
ReadFile
GlobalDeleteAtom
GlobalGetAtomNameA
GetComputerNameA
GetCPInfo

user32

SendDlgItemMessageA
IsDlgButtonChecked
TrackPopupMenu
SendMessageW
ActivateKeyboardLayout
PostMessageW
SetWindowPos
LoadImageA
CreateAcceleratorTableW
GetMessageW
SendDlgItemMessageW
EnableMenuItem
GetKeyboardType
wsprintfA
LoadIconW
ReleaseDC
WinHelpA
LoadIconA
EmptyClipboard

gdi32

CreateDCA
GetCharWidth32W
SaveDC
ExtTextOutW
GetCharWidthFloatW
SetDCBrushColor
ColorMatchToTarget
LineTo
SetArcDirection
CreateSolidBrush
GetTextExtentExPointW
SetRectRgn
CreateFontIndirectExW

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA

comctl32

ImageList_SetFlags
CreateToolbarEx

ws2_32

WSAEnumProtocolsW
recvfrom
bind
getservbyname
ioctlsocket
gethostbyname
closesocket
WSAGetLastError
setsockopt

winmm

joyGetNumDevs
mciSendCommandA

winspool.drv

GetPrinterDataExA
WaitForPrinterChange
AddPrinterDriverW
OpenPrinterA
DeletePrinterDriverW
AddJobA
AddPortExA
GetPrinterDriverDirectoryW
AddPrintProcessorA

inetcomm

MimeOleObjectFromMoniker
HrDoAttachmentVerb
CreateRASTransport
MimeOleGetFileInfoW
MimeOleParseRfc822AddressW
MimeOleGetCodePageCharset
MimeOleSMimeCapAddCert
EssReceiptRequestEncodeEx
MimeOleCreateByteStream
MimeOleGenerateMID
MimeOleSetBodyPropA
MimeOleGetPropW
MimeOleFindCharset
CreatePOP3Transport
EssReceiptEncodeEx
MimeOleGetInternat
HrGetLastOpenFileDirectory
GetDllMajorVersion
MimeOleGetFileInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.N
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aAUTTF
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZWQggJ
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggLoS
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfiGB
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LlPz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyy
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

ws2_32

winmm

winspool.drv

inetcomm

Sections

.text Size: 11KB - Virtual size: 11KB

.N Size: 2KB - Virtual size: 45KB

.M Size: 1KB - Virtual size: 24KB

.aAUTTF Size: 512B - Virtual size: 7KB

.p Size: 4KB - Virtual size: 37KB

.ZWQggJ Size: 512B - Virtual size: 1KB

.T Size: 1024B - Virtual size: 24KB

.ggLoS Size: 1024B - Virtual size: 26KB

.data Size: 15KB - Virtual size: 15KB

.nfiGB Size: 2KB - Virtual size: 20KB

.LlPz Size: 2KB - Virtual size: 5KB

.tyy Size: 512B - Virtual size: 173KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.N
Size: 2KB - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 24KB

.aAUTTF
Size: 512B - Virtual size: 7KB

.p
Size: 4KB - Virtual size: 37KB

.ZWQggJ
Size: 512B - Virtual size: 1KB

.T
Size: 1024B - Virtual size: 24KB

.ggLoS
Size: 1024B - Virtual size: 26KB

.data
Size: 15KB - Virtual size: 15KB

.nfiGB
Size: 2KB - Virtual size: 20KB

.LlPz
Size: 2KB - Virtual size: 5KB

.tyy
Size: 512B - Virtual size: 173KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB