NEAS[.]5a588e3af331f25747fc977e5329c4d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a588e3af331f25747fc977e5329c4d0.exe
Size

20KB
MD5

5a588e3af331f25747fc977e5329c4d0
SHA1

c4990d6edc7b17b4675e7f3f8b080116e005257b
SHA256

a02afba69249351d2803cb684cf39ecccc1d8d4be364537042e181945fd5e332
SHA512

3248a395760f5e161ab173b1ee70c60d9d345ce006cbd7523c3778f727dbe0a5bdb7699d9464b74279a59dce7c0dc92635d31e678088b565364ad9e992c247c9
SSDEEP

384:BvbH3oWXBm6hHDGDF/QTtz2Pt37/Z6FD4lMyOgI6Af6fIg033:Bj38Dwz2PV7EMtOgA60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a588e3af331f25747fc977e5329c4d0.exe

Files

NEAS.5a588e3af331f25747fc977e5329c4d0.exe
.dll windows:4 windows x86

280219c5b72a28a1ebea03035e15dcc6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ijl15

ord3
ord2
ord5

mfc80

ord3333
ord4261
ord4481
ord3949
ord2644
ord3709
ord3719
ord3718
ord762
ord2533
ord2646
ord2540
ord2838
ord2714
ord4307
ord2835
ord314
ord2731
ord2537
ord6754
ord4038
ord5213
ord3683
ord5230
ord4568
ord266
ord1177
ord1209
ord581
ord1167
ord1917
ord371
ord1098
ord1208
ord1201
ord1206
ord1092
ord1037
ord1084
ord315
ord765
ord4014
ord6278
ord3801
ord6276
ord4326
ord2063
ord2018
ord5583
ord3806
ord1010
ord5102
ord3830
ord6219
ord5382
ord3832
ord1920
ord2931
ord757
ord5224
ord566
ord5226
ord2248
ord3948
ord1193
ord3174
ord1198
ord313
ord578
ord310
ord265
ord747
ord559
ord1187
ord764
ord1175
ord5566
ord1120

msvcr80

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
memset
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
_purecall
free
memcpy
_initterm

kernel32

TerminateProcess
Sleep
GetVersionExA
GetThreadLocale
LocalAlloc
LocalFree
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedExchange
WideCharToMultiByte
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetACP
InterlockedCompareExchange

user32

GetClientRect

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString

Exports

Exports

FreeCameraControl
GetCameraControl

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

280219c5b72a28a1ebea03035e15dcc6

Headers

File Characteristics

Imports

ijl15

mfc80

msvcr80

kernel32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB