NEAS[.]9d13add494fd82263e70c583574e6a30[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9d13add494fd82263e70c583574e6a30.exe
Size

213KB
MD5

9d13add494fd82263e70c583574e6a30
SHA1

2b6d10ec0df2a7557a7a72fc1b0a99c545573d7e
SHA256

17982173ea245c95f951ce983d9a39a787478130c30b568d9599d4ed67d49bc1
SHA512

8632d55cf271e23f4d48d28cd3eb0a89d5603eb2661d689a293d3fdb7b717f0b628bebb9c80f684fbd56b66703729451d3efc42c86af34309a723bacfe484add
SSDEEP

6144:JN+TNmQ1J+tl7OwGWvv6I4RLgup5306QL1:TedQ64vqg606G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9d13add494fd82263e70c583574e6a30.exe

Files

NEAS.9d13add494fd82263e70c583574e6a30.exe
.exe windows:4 windows x86

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenSemaphoreA
GetDiskFreeSpaceA
GetProcAddress
GetNamedPipeInfo
InitializeCriticalSection
MulDiv
DosDateTimeToFileTime
GetTempFileNameA
OpenMutexW
CreateEventA
GetLongPathNameW
OpenFile
GetACP
EnumDateFormatsA
GetCurrentProcessId
CreateMailslotW
GetSystemDirectoryA
CopyFileA
ExpandEnvironmentStringsA
GetStartupInfoA
GetLocaleInfoA
GetStartupInfoW
GlobalGetAtomNameW
GetUserDefaultLangID
GetPriorityClass
SetCalendarInfoW
FlushFileBuffers
GetEnvironmentVariableW
LocalAlloc
EnumTimeFormatsA
CompareStringA
GetSystemDirectoryW
ExpandEnvironmentStringsW
GetNumberFormatW
Beep
FindResourceA
GetCommandLineA
GetLocaleInfoW
GetCalendarInfoW
FileTimeToDosDateTime
LocalFree
WaitForMultipleObjects
GetModuleHandleA
SetComputerNameW
IsBadStringPtrW
ConnectNamedPipe
GetThreadPriority
GlobalFindAtomA
CreateFileA
GetSystemDefaultLCID
FreeResource
FindResourceW
ReadFile
GlobalDeleteAtom
GlobalGetAtomNameA
GetComputerNameA
GetCPInfo

user32

SendDlgItemMessageA
IsDlgButtonChecked
TrackPopupMenu
SendMessageW
ActivateKeyboardLayout
PostMessageW
SetWindowPos
LoadImageA
CreateAcceleratorTableW
GetMessageW
SendDlgItemMessageW
EnableMenuItem
GetKeyboardType
wsprintfA
LoadIconW
ReleaseDC
WinHelpA
LoadIconA
EmptyClipboard

gdi32

CreateDCA
GetCharWidth32W
SaveDC
ExtTextOutW
GetCharWidthFloatW
SetDCBrushColor
ColorMatchToTarget
LineTo
SetArcDirection
CreateSolidBrush
GetTextExtentExPointW
SetRectRgn
CreateFontIndirectExW

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueA

comctl32

ImageList_SetFlags
CreateToolbarEx

ws2_32

WSAEnumProtocolsW
recvfrom
bind
getservbyname
ioctlsocket
gethostbyname
closesocket
WSAGetLastError
setsockopt

winmm

joyGetNumDevs
mciSendCommandA

winspool.drv

GetPrinterDataExA
WaitForPrinterChange
AddPrinterDriverW
OpenPrinterA
DeletePrinterDriverW
AddJobA
AddPortExA
GetPrinterDriverDirectoryW
AddPrintProcessorA

inetcomm

MimeOleObjectFromMoniker
HrDoAttachmentVerb
CreateRASTransport
MimeOleGetFileInfoW
MimeOleParseRfc822AddressW
MimeOleGetCodePageCharset
MimeOleSMimeCapAddCert
EssReceiptRequestEncodeEx
MimeOleCreateByteStream
MimeOleGenerateMID
MimeOleSetBodyPropA
MimeOleGetPropW
MimeOleFindCharset
CreatePOP3Transport
EssReceiptEncodeEx
MimeOleGetInternat
HrGetLastOpenFileDirectory
GetDllMajorVersion
MimeOleGetFileInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.N
Size: 2KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aAUTTF
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZWQggJ
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.T
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggLoS
Size: 1024B - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nfiGB
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LlPz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyy
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

372a13aa4befcecafec3dc399cc203fd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

ws2_32

winmm

winspool.drv

inetcomm

Sections

.text Size: 11KB - Virtual size: 11KB

.N Size: 2KB - Virtual size: 45KB

.M Size: 1KB - Virtual size: 24KB

.aAUTTF Size: 512B - Virtual size: 7KB

.p Size: 4KB - Virtual size: 37KB

.ZWQggJ Size: 512B - Virtual size: 1KB

.T Size: 1024B - Virtual size: 24KB

.ggLoS Size: 1024B - Virtual size: 26KB

.data Size: 15KB - Virtual size: 15KB

.nfiGB Size: 2KB - Virtual size: 20KB

.LlPz Size: 2KB - Virtual size: 5KB

.tyy Size: 512B - Virtual size: 173KB

.rsrc Size: 169KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.N
Size: 2KB - Virtual size: 45KB

.M
Size: 1KB - Virtual size: 24KB

.aAUTTF
Size: 512B - Virtual size: 7KB

.p
Size: 4KB - Virtual size: 37KB

.ZWQggJ
Size: 512B - Virtual size: 1KB

.T
Size: 1024B - Virtual size: 24KB

.ggLoS
Size: 1024B - Virtual size: 26KB

.data
Size: 15KB - Virtual size: 15KB

.nfiGB
Size: 2KB - Virtual size: 20KB

.LlPz
Size: 2KB - Virtual size: 5KB

.tyy
Size: 512B - Virtual size: 173KB

.rsrc
Size: 169KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB