NEAS[.]87111263a5c7b246b7a669dbedc3c670[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.87111263a5c7b246b7a669dbedc3c670.exe
Size

9KB
MD5

87111263a5c7b246b7a669dbedc3c670
SHA1

4b9f432f7045e12ff5b8f7a1e30b7cf301ee2050
SHA256

4e1517499ff18e4b9b8a6cd1ceae1c2e0e7cc600cd54480aefb9e3bef0009861
SHA512

1b74f4c0db05a4bd1d7185a975445138f13b89ebeff21645b9274a80af15b0a119425762c310891c6e74040fa5b72ffb3289d0e1780ff5f8ff366b769df53028
SSDEEP

192:uG2ILQE2tdyhB0BF0H+zZpAjieD+od1l2O:uGRLRrBeTAjins

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.87111263a5c7b246b7a669dbedc3c670.exe

Files

NEAS.87111263a5c7b246b7a669dbedc3c670.exe
.dll windows:6 windows x86

38d8d4914aea1f3b9c03118dc69644c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

svc.binary

?defaultPath@Env@@SA?AV?$Ref@VString@@@@XZ

lib.graphic.geometry

??0Point@@QAE@HH@Z

lib.io.char

?split@StringUtil@@SA?AV?$Ref@V?$TVector@V?$Ref@VString@@@@@@@@V?$Ref@VString@@@@II@Z

lib.syslog

?reg@SysLogFilter@@SAIPBD@Z

svc.filesys

?parent@Service@Client@Filesystem@Services@@SA?AV?$Ref@VString@@@@V5@_N@Z
?absolute@Service@Client@Filesystem@Services@@SA?AV?$Ref@VString@@@@V5@0@Z
?search@Service@Client@Filesystem@Services@@SA?AV?$Ref@VString@@@@V5@0@Z
?name@Service@Client@Filesystem@Services@@SA?AV?$Ref@VString@@@@V5@@Z

svc.graphic

??_7Font@@6B0@@
??_7Font@@6BRefCount@@@

system

?dump@Object@@UAEXV?$Ref@VStream@Interfaces@@@@@Z
?_dump@Object@@UAEXV?$Ref@VStream@Interfaces@@@@@Z
?gcproxy@Object@@UAEPAVGcProxy@@XZ
?obj@Object@@UAE?AV?$Ref@VObject@@@@XZ
?selfTest@Object@@UAE_NV?$Ref@VStream@Interfaces@@@@@Z
?unlockRef@Object@@UAEXXZ
??1Object@@MAE@XZ
?decRef@Object@@UAEXXZ
?incRef@Object@@UAEXXZ
??0Object@@QAE@XZ
?free@Heap@@SAXPAXI0@Z
?alloc@Heap@@SAPAXIIPAX@Z
??_7type_info@@6B@
?lock@InitCode@@SAXXZ
?unlock@InitCode@@SAXXZ
?create@String@@SA?AV?$Ref@VString@@@@PBDII@Z
?lockRef@Object@@UAEXXZ
?counterRef@Object@@UAEIXZ
?_selfTest@Object@@UAE_NV?$Ref@VStream@Interfaces@@@@@Z

lib.filter.font.fnt

?create@WinFont@@SA?AV?$Ref@VFont@@@@V?$Ref@VString@@@@@Z

lib.filter.font.freetype

?create@FreeTypeFont@@SA?AV?$Ref@VFont@@@@V?$Ref@VString@@@@@Z

Exports

Exports

??4FlexFont@@QAEAAV0@$$QAV0@@Z
??4FlexFont@@QAEAAV0@ABV0@@Z
?create@FlexFont@@SA?AV?$Ref@VFont@@@@V?$Ref@VString@@@@0@Z

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38d8d4914aea1f3b9c03118dc69644c3

Headers

DLL Characteristics

File Characteristics

Imports

svc.binary

lib.graphic.geometry

lib.io.char

lib.syslog

svc.filesys

svc.graphic

system

lib.filter.font.fnt

lib.filter.font.freetype

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 96B

.reloc Size: 512B - Virtual size: 296B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 96B

.reloc
Size: 512B - Virtual size: 296B