NEAS[.]77e3a70678c142d993d18b577fc6f340[.]exe

General

Target

NEAS.77e3a70678c142d993d18b577fc6f340.exe
Size

235KB
MD5

77e3a70678c142d993d18b577fc6f340
SHA1

246370218bf23e58f36f7e96c791ef82aa6d89d2
SHA256

0986405e0a05fbf5477716216e8cd5ce3c63ea7a4b43c059f38852344b87fdb4
SHA512

0d9b29a22e6bbd8184b7c7e3aede3979d8d0bae2fd787e257cb155ca7187b2a13bdd8115d650c1c3add9fb3b97237671f7a76bd62cd936a161a9ea1f375be950
SSDEEP

6144:mUcPOYEBTxVhMbkWeP3SADdbQ25h2pPQQUGdJMdR9d:NcQTxf5PiebQrPQD0Md

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.77e3a70678c142d993d18b577fc6f340.exe

Files

NEAS.77e3a70678c142d993d18b577fc6f340.exe
.dll windows:6 windows x86

80123d3b496d010e91d387c9ce3f9355

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
DecodePointer
GetLastError
FreeLibrary
GetProcAddress
LocalAlloc
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
WerRegisterMemoryBlock
VirtualProtect
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
HeapSetInformation
GetProcessHeap
QueryPerformanceCounter
LoadLibraryA

msvcr100

_onexit
_lock
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
srand
memcpy
_msize
realloc
memmove
__CxxFrameHandler3
qsort
memset
??_V@YAXPAX@Z
??_U@YAPAXI@Z
free
calloc
_invalid_parameter_noinfo_noreturn
??3@YAXPAX@Z
_except_handler4_common

Exports

Exports

AutoOrient

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80123d3b496d010e91d387c9ce3f9355

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr100

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 218KB - Virtual size: 220KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 218KB - Virtual size: 220KB