NEAS[.]6f09713b9ed6412dd6a0a762e495c7b0[.]exe

General

Target

NEAS.6f09713b9ed6412dd6a0a762e495c7b0.exe
Size

374KB
MD5

6f09713b9ed6412dd6a0a762e495c7b0
SHA1

a2f495c4bbb689a14fd06e918d347d71e6eb36ba
SHA256

876464bf101bd77eb755865ed66278f899916aea0819d7c50e41fdf2d362cd81
SHA512

44a5986140ad43d4d6a4b534132d65e844637d2a10cce580653dcd408651cad08fda0e6ca6698ba60335ead74cb11e366ac5bba087cff4565384afa894ca8c8d
SSDEEP

6144:CByMOZWbqFtF5IO4nf25RmG+ViCSxGwgdzJoRlWk5H4SccUsAPoMNj60HQRDN0tS:C0MOAWJIO625RmGywOQH2t60HCDatudP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6f09713b9ed6412dd6a0a762e495c7b0.exe

Files

NEAS.6f09713b9ed6412dd6a0a762e495c7b0.exe
.dll windows:6 windows x86

e7fbd3575271e2637d95b4d7b8652b53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr120

fwrite
_wfopen
_setmode
memmove_s
isdigit
toupper
sprintf
isspace
_snprintf
free
malloc
realloc
strncmp
__CppXcptFilter
ftell
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
fseek
fgets
fflush
feof
_stat64i32
fread
fopen
fclose
memset
memcpy_s
_difftime64
_time64
strstr
wcsncpy
strncpy
strchr
_amsg_exit
atol
_fileno

kernel32

QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
DecodePointer
EncodePointer
SystemTimeToFileTime
GetSystemTime
GetCurrentThreadId
LoadLibraryExW
LoadLibraryExA
GetProcAddress
FreeLibrary
GetLastError
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameW
GetSystemTimeAsFileTime

Exports

Exports

R_FIPS_MODULE_master

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e7fbd3575271e2637d95b4d7b8652b53

Headers

DLL Characteristics

File Characteristics

Imports

msvcr120

kernel32

Exports

Exports

Sections

.text Size: 170KB - Virtual size: 169KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 6KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 160KB - Virtual size: 164KB

.text
Size: 170KB - Virtual size: 169KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 6KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 160KB - Virtual size: 164KB