NEAS[.]f58956d873c99c8bdecc589ed7910930[.]exe

General

Target

NEAS.f58956d873c99c8bdecc589ed7910930.exe
Size

630KB
MD5

f58956d873c99c8bdecc589ed7910930
SHA1

e7dc29f7eaf17364ccf15d20947de276b7d4e9c3
SHA256

683032987567afa214f1a719e335db0808c8d77719954de778f5740fda4d6207
SHA512

686a6b4e726edfb0fa422c51d52b89a08b29643a8dc58ce534e00fdce717dae52608c4b0e2b029d10267ceb942ba79569965130e16a64b7e9b4af091dc8c04e5
SSDEEP

12288:IQf1dTKHBVFzharP4Cje/LtO2OmdL4YmCWbyuWH4hk6:IkyBDksCjULtpdcpCWGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f58956d873c99c8bdecc589ed7910930.exe

Files

NEAS.f58956d873c99c8bdecc589ed7910930.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CHKLST_CheckItem
CHKLST_DeInit
CHKLST_GetItemText
CHKLST_GetItemTextSet
CHKLST_GetLineCount
CHKLST_Init
CHKLST_IsItemChecked
CHKLST_ResetAllItems
DB_ClearWaypoints
DB_DeInitDatabase
DB_DeleteRoute
DB_Edit
DB_Eof
DB_FindAllRoutes
DB_Found
DB_GetBoolean
DB_GetDatabase
DB_GetDouble
DB_GetInteger
DB_GetRouteTitle
DB_GetRouteValues
DB_GetString
DB_IndexName
DB_InitDatabase
DB_Insert
DB_LoadRoute
DB_Next
DB_Post
DB_Prior
DB_RecCount
DB_SaveRoute
DB_Seek
DB_SeekDouble
DB_SetBoolean
DB_SetDatabase
DB_SetDouble
DB_SetFilter
DB_SetInteger
DB_SetString
DB_SetWaypoint

Sections

CODE
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 545KB - Virtual size: 545KB

DATA Size: 7KB - Virtual size: 6KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.edata Size: 1024B - Virtual size: 1015B

.reloc Size: 39KB - Virtual size: 39KB

.rsrc Size: 27KB - Virtual size: 27KB

CODE
Size: 545KB - Virtual size: 545KB

DATA
Size: 7KB - Virtual size: 6KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.edata
Size: 1024B - Virtual size: 1015B

.reloc
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 27KB - Virtual size: 27KB