NEAS[.]d580480463eef0b66054da126c36f0e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d580480463eef0b66054da126c36f0e0.exe
Size

700KB
MD5

d580480463eef0b66054da126c36f0e0
SHA1

8bdca50acdc9f707a74aa6e735989dd725db8757
SHA256

fdcc07102b45176a3c89c6de1a7643d5339901148d34308279e3fb79bdbfb499
SHA512

a2c2f0329cde7199359987d835fb8daa0475cee25a67c7f7c351e83e9b3539d383bc482212c8f4d460f259179dbadba195cab63911d0149a6eeb34bdefd7a650
SSDEEP

12288:bBdVunkG5fnT+ZaH5ToREaWGV9WgcIOPq55VhTw8p5yEDvsKA5hfk6YeYR3wzOir:bBvqfnT+ZAB/absgCPmVhEA59DvvA51/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d580480463eef0b66054da126c36f0e0.exe

Files

NEAS.d580480463eef0b66054da126c36f0e0.exe
.exe windows:4 windows x86 arch:x86

b4adf79022b075630c8b35fa8cfbe219

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiInReset
midiInStop
midiOutOpen
midiOutGetDevCapsA
midiOutGetNumDevs
midiOutClose
timeGetTime
timeSetEvent
timeBeginPeriod
timeEndPeriod
timeKillEvent
midiOutShortMsg
midiInClose

msvfw32

MCIWndCreateA

comctl32

ord17

kernel32

GetOEMCP
GetFileAttributesA
GetFileSize
GetFileTime
SetErrorMode
WritePrivateProfileStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetCPInfo
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
Sleep
FindClose
GetLastError
FindFirstFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetCurrentDirectoryA
OutputDebugStringA
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetProcAddress
HeapCreate
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
LocalAlloc
FormatMessageA
LocalFree
GlobalAlloc
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
GlobalGetAtomNameA
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MulDiv
SetLastError
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId

user32

TranslateMessage
GetMessageA
SetWindowContextHelpId
MapDialogRect
LoadStringA
InflateRect
GetClassNameA
GetDesktopWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetDC
ReleaseDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
UpdateWindow
ValidateRect
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
GetCapture
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
MessageBoxA
IsWindowVisible
IsIconic
GetSystemMetrics
DrawIcon
LoadIconA
PtInRect
ReleaseCapture
SetCapture
SetRect
GetCursorPos
SetCursor
PostQuitMessage
CharUpperA
SendDlgItemMessageA
PostMessageA
SetRectEmpty
SetWindowPos
GetDlgItem
ScreenToClient
IsWindow
InvalidateRect
GetParent
GetWindowRect
GetClientRect
SendMessageA
EnableWindow
IsWindowUnicode
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
WinHelpA

gdi32

RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
SetTextColor
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
GetTextColor
LPtoDP
GetClipBox
Polygon
GetTextExtentPoint32A
CreatePen
GetBkColor
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetTextExtentPointA
CreateDIBitmap
Ellipse

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject

olepro32

ord253

oleaut32

SysAllocStringByteLen
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4adf79022b075630c8b35fa8cfbe219

Headers

File Characteristics

Imports

winmm

msvfw32

comctl32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 36KB - Virtual size: 51KB

.rsrc Size: 424KB - Virtual size: 420KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 36KB - Virtual size: 51KB

.rsrc
Size: 424KB - Virtual size: 420KB