NEAS[.]629080ec42542e9741ec7484b3d46d80[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.629080ec42542e9741ec7484b3d46d80.exe
Size

337KB
MD5

629080ec42542e9741ec7484b3d46d80
SHA1

7b4b9ae96e1f8e7dbc0243030e1359eeda4bdf42
SHA256

4b863926232ee4bfb3079f021e6f2feeb6b7cef7896d7b7ddde7cddb838fcf49
SHA512

b24c76eb923d59c782871c109442c1189520f5700c01c80d2bf6d8bfdaa9aca276ef249be3fe8a7bdea657d82c18dbbe9193ff861a76ffd45ba1d5dfcc59c5b4
SSDEEP

6144:l7oTcPiSmOfj9/th+SyFDnUBCovM3ZSqrO+zkiddBnU/o2O5LiqS4Y+QPKIN7P:toeiSVlzRyleVvYTOHizBUATU4FIN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.629080ec42542e9741ec7484b3d46d80.exe

Files

NEAS.629080ec42542e9741ec7484b3d46d80.exe
.dll windows:6 windows x86

1f792e359d7286061289e474c34304ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc100

ord6835
ord1288
ord7510
ord11180
ord9449
ord11787
ord11726
ord4078
ord7141
ord13767
ord4724
ord2163
ord11421
ord11420
ord13301
ord7073
ord13299
ord8486
ord3676
ord3618
ord11806
ord7091
ord1732
ord10922
ord14075
ord13181
ord11413
ord7144
ord13483
ord13480
ord13485
ord13482
ord13484
ord13481
ord888
ord6112
ord3409
ord7584
ord11172
ord7355
ord11184
ord11153
ord4622
ord4903
ord5095
ord8439
ord4881
ord5098
ord4625
ord4774
ord4606
ord6897
ord6898
ord6888
ord4772
ord7357
ord9281
ord8304
ord13518
ord322
ord13310
ord11274
ord2056
ord266
ord1294
ord265
ord259
ord262
ord4317
ord2818
ord13329
ord11297
ord2611
ord5242
ord1316
ord1313
ord5238
ord901
ord310
ord300
ord305
ord316
ord2626
ord6010
ord906
ord2090
ord2052
ord2050
ord2079
ord1979
ord2040
ord3406
ord408
ord1948
ord2089
ord2087
ord1940
ord1867
ord1929
ord323
ord1297
ord2061
ord1296

msvcr100

strtok_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
memset
_stricmp
wcsncpy_s
_CxxThrowException
__CxxFrameHandler3
memcpy
_malloc_crt

mapi32

ord45
ord17
ord13
ord44
ord140
ord21
ord23
ord11
ord15

kernel32

LoadLibraryA
SetLastError
RaiseException
MultiByteToWideChar
SystemTimeToFileTime
FileTimeToSystemTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
WerRegisterMemoryBlock
VirtualProtect
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapSetInformation
GetProcessHeap
QueryPerformanceCounter
LocalAlloc
LocalFree
GetTimeZoneInformation
GetSystemTimeAsFileTime
lstrlenA
lstrcmpiA
lstrcmpA
LoadLibraryExA
GetModuleHandleW
GlobalFree
GlobalAlloc
GetModuleHandleExA
GetLastError
GetLocalTime
GlobalUnlock
GlobalLock
GlobalReAlloc
GetProcAddress
GetModuleHandleA
FreeLibrary

mso

ord1594
ord6137
ord1525
ord8953
ord491
ord5064

Exports

Exports

ABORTFAE
CLOSEFILEFAE
GETDEFAULTFILEFAE
GETFORMATDESCFAE
GETFORMATSFAE
GETMAPINFOFAE
GETRECORDFAE
INITIALIZEFAE
OPENFILEFAE
OPENFILEMAPFAE
PUTMAPINFOFAE
PUTRECORDFAE
RECOGNIZEFAE
TERMINATEFAE

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 252KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f792e359d7286061289e474c34304ab

Headers

DLL Characteristics

File Characteristics

Imports

mfc100

msvcr100

mapi32

kernel32

mso

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 252KB - Virtual size: 256KB

.text
Size: 81KB - Virtual size: 81KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 252KB - Virtual size: 256KB