NEAS[.]8895e760286e0680637b0f398b8d08e0[.]exe

General

Target

NEAS.8895e760286e0680637b0f398b8d08e0.exe
Size

237KB
MD5

8895e760286e0680637b0f398b8d08e0
SHA1

a3c4b4a231889d200798f4e6af3f85d0f661eebf
SHA256

22869abd02b3f77b7a4b101d0638635c96054edfa33c36d4a6d3aa505f2d955c
SHA512

f5954d751b1f6f7e04201d3ed2ce5f97d186fda42e5286ca71f9b1b7bd57227f3a17303127c1e97bb77de438b1d874a78ca6a3e38e5822c13846a90a1f2046a4
SSDEEP

6144:aZcPOYE4yHBIOBN9NdurQIbOxF8/WFoVM5V:AcxoRpErwF8/uoVCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8895e760286e0680637b0f398b8d08e0.exe

Files

NEAS.8895e760286e0680637b0f398b8d08e0.exe
.dll windows:6 windows x86

80123d3b496d010e91d387c9ce3f9355

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
DecodePointer
GetLastError
FreeLibrary
GetProcAddress
LocalAlloc
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
WerRegisterMemoryBlock
VirtualProtect
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
HeapSetInformation
GetProcessHeap
QueryPerformanceCounter
LoadLibraryA

msvcr100

_onexit
_lock
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
srand
memcpy
_msize
realloc
memmove
__CxxFrameHandler3
qsort
memset
??_V@YAXPAX@Z
??_U@YAPAXI@Z
free
calloc
_invalid_parameter_noinfo_noreturn
??3@YAXPAX@Z
_except_handler4_common

Exports

Exports

AutoOrient

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80123d3b496d010e91d387c9ce3f9355

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr100

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 220KB - Virtual size: 220KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 220KB - Virtual size: 220KB