NEAS[.]2b8d46ea845e64f1fc4190b793d09210[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2b8d46ea845e64f1fc4190b793d09210.exe
Size

132KB
MD5

2b8d46ea845e64f1fc4190b793d09210
SHA1

daf9d755929020d054a33c54c225583731cc1598
SHA256

f1f8382846789981c289c484dbc53856a060425c923be2e13000cb25df8906bd
SHA512

4a1193c419734bc40c539f0bf586fae9f2d022b3fe09a189d5219a38ce98a5937fde576fe2e499136b54b3da0dda70cef613fc27d8b67c2b25d44c308133919c
SSDEEP

3072:WYURnChfv+FU0avc+w9ne7BBF1ZWGDCbcw17sCWQXK+W:WFJa+C1c+w9ne7XF1ZW0Q17VWQXo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b8d46ea845e64f1fc4190b793d09210.exe

Files

NEAS.2b8d46ea845e64f1fc4190b793d09210.exe
.dll windows:6 windows x86

16e44720ed53f3463fa7fb6ac376456a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetLastError
MultiByteToWideChar
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

memset
memcpy
_except_handler4_common
memmove
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

calloc
realloc
malloc
free

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
_stricmp
_strdup
isdigit

api-ms-win-crt-math-l1-1-0

floor

api-ms-win-crt-stdio-l1-1-0

fwrite
_ftelli64
_fseeki64
fread
fopen
_fileno
ungetc
fclose
_wfopen
__acrt_iob_func
_setmode
_get_osfhandle
_chsize_s
__stdio_common_vsprintf

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table
_initialize_onexit_table

Exports

Exports

WavpackAddWrapper
WavpackAppendBinaryTagItem
WavpackAppendTagItem
WavpackBigEndianToNative
WavpackCloseFile
WavpackDeleteTagItem
WavpackFloatNormalize
WavpackFlushSamples
WavpackFreeWrapper
WavpackGetAverageBitrate
WavpackGetBinaryTagItem
WavpackGetBinaryTagItemIndexed
WavpackGetBitsPerSample
WavpackGetBytesPerSample
WavpackGetChannelIdentities
WavpackGetChannelLayout
WavpackGetChannelMask
WavpackGetEncodedNoise
WavpackGetErrorMessage
WavpackGetFileExtension
WavpackGetFileFormat
WavpackGetFileSize
WavpackGetFileSize64
WavpackGetFloatNormExp
WavpackGetInstantBitrate
WavpackGetLibraryVersion
WavpackGetLibraryVersionString
WavpackGetMD5Sum
WavpackGetMode
WavpackGetNativeSampleRate
WavpackGetNumBinaryTagItems
WavpackGetNumChannels
WavpackGetNumErrors
WavpackGetNumSamples
WavpackGetNumSamples64
WavpackGetNumSamplesInFrame
WavpackGetNumTagItems
WavpackGetProgress
WavpackGetQualifyMode
WavpackGetRatio
WavpackGetReducedChannels
WavpackGetSampleIndex
WavpackGetSampleIndex64
WavpackGetSampleRate
WavpackGetTagItem
WavpackGetTagItemIndexed
WavpackGetVersion
WavpackGetWrapperBytes
WavpackGetWrapperData
WavpackGetWrapperLocation
WavpackLittleEndianToNative
WavpackLossyBlocks
WavpackNativeToBigEndian
WavpackNativeToLittleEndian
WavpackOpenFileInput
WavpackOpenFileInputEx
WavpackOpenFileInputEx64
WavpackOpenFileOutput
WavpackOpenRawDecoder
WavpackPackInit
WavpackPackSamples
WavpackSeekSample
WavpackSeekSample64
WavpackSeekTrailingWrapper
WavpackSetChannelLayout
WavpackSetConfiguration
WavpackSetConfiguration64
WavpackSetFileInformation
WavpackStoreMD5Sum
WavpackUnpackSamples
WavpackUpdateNumSamples
WavpackVerifySingleBlock
WavpackWriteTag

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e44720ed53f3463fa7fb6ac376456a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB