NEAS[.]3b796cc6f945c53b1e2f61b6a2786cf0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3b796cc6f945c53b1e2f61b6a2786cf0.exe
Size

94KB
MD5

3b796cc6f945c53b1e2f61b6a2786cf0
SHA1

279c4ef0f55ab6588013431505d7e448a42c5d81
SHA256

a236bf1f42251210087d4afd6f80de960886dec1a96cd62884bf43e99441693b
SHA512

333bb80e0f031b71f3829c5d1df6e1db5be8e8b372852d509f93da83e3e3c823ee4599d0bb6c213962f703ce5559b67b7f685d41c9294752d3f49a77c6d47ef2
SSDEEP

1536:t6f13QpSrNpqUJBkMXbcZNGxoSPhyyCCpGFTh/mYpTXLiWlwbr1:Sh+SDrJCWsNgokymGJh/mALwbr1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3b796cc6f945c53b1e2f61b6a2786cf0.exe

Files

NEAS.3b796cc6f945c53b1e2f61b6a2786cf0.exe
.exe windows:5 windows x86

9c1a47b96edd358dafb856a8416d47ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

libufun

UF_initialize
uc4620
UF_get_release
UF_ASSEM_ask_assem_options
uc4624
UF_terminate
uc4621
UF_ASSEM_ask_search_directories
UF_ASSEM_set_search_directories
UF_ASSEM_set_assem_options
UF_PART_open
UF_free_string_array
UF_DRF_set_retained_state
UF_MODL_set_update_fail_option
UF_PART_close
UF_DRF_record_draft_objects
UF_DRF_are_draft_objects_const
UF_DRF_free_comp_data
UF_MODL_update_all_features
UF_ASSEM_set_work_part
uc6468
UF_PART_ask_display_part
uc6466
UF_PART_set_display_part
UF_DRAW_ask_drawings
UF_DRAW_ask_views
UF_DRAW_open_drawing
UF_OBJ_ask_name
UF_DRAW_ask_view_display
UF_DRAW_set_view_display
UF_DRAW_update_one_view
uc6497
UF_DRAW_ask_suppress_view_updat
UF_DRAW_set_suppress_view_updat
uc6499
uc6494
UF_VIEW_ask_tag_of_view_name
UF_DRAW_is_object_out_of_date
UF_DRF_is_annotation_retained
UF_ASSEM_ask_work_part
UF_OBJ_cycle_objs_in_part
UF_OBJ_ask_type_and_subtype
UF_DRAW_ask_curve_group_members
UF_reallocate_memory
UF_CURVE_ask_centroid
UF_free
UF_get_fail_message

libsyss

?MACH__checking_level@@3HA
?DRFCMP_load@@YAXXZ
?ERROR_lprintf@@YAHPBDZZ
RDEBUG_ask_flag

libdrfcmp

?SetEnvSpecifiedUadDebugTokens@Drafting@UGS@@YAXXZ
?PrintUadDebugOutputHeader@Drafting@UGS@@YAXI@Z
?PrintUadDebugOutputFooter@Drafting@UGS@@YAXI@Z

libdraw

?DRAWINGS_ask_version_objects@@YA_NXZ
?DRAWINGS_set_version_objects@@YAX_N@Z
?DMV_ask_suppress_view_update@@YA_NXZ
?DMV_set_suppress_view_update@@YAX_N@Z

msvcr100

_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
qsort
printf

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

?NXSigningResource@@YAXXZ

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c1a47b96edd358dafb856a8416d47ea

Headers

DLL Characteristics

File Characteristics

Imports

libufun

libsyss

libdrfcmp

libdraw

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 73KB - Virtual size: 76KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 73KB - Virtual size: 76KB