NEAS[.]768b95055b9dbd6b04847a7d5ce899e0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.768b95055b9dbd6b04847a7d5ce899e0.exe
Size

133KB
MD5

768b95055b9dbd6b04847a7d5ce899e0
SHA1

248af826c1bb57081701ce964961f31afcbeb865
SHA256

ba2d5cff71bce23830f1d89a5398a10c5c6fda84054bb9ab07dca4e6387e0987
SHA512

c831f7214627d55ddb45badb8e06cdc980fface16142e3c9c4a372208a5d76e6db85fc0f84adb2cf7fa16846c399c7a4d2c305d1e6f063087dfd25ae2a9898f2
SSDEEP

1536:pPYZECK11YpyArZcu5yVg5ZA3HBVey+eB8gsIinT0eHJ1JRdn76/bm08:p+EJ8pyG9Tv80FIiT0eHDVG/bm08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.768b95055b9dbd6b04847a7d5ce899e0.exe

Files

NEAS.768b95055b9dbd6b04847a7d5ce899e0.exe
.exe windows:4 windows x86

02e8b657b7b20980dbee66f25d46cfac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_flsbuf
_iob
_isctype
_onexit
_pctype
_setmode
abort
atan
atexit
atoi
clock
cos
fclose
fgets
fopen
fprintf
fputs
free
fwrite
malloc
memcpy
memset
printf
puts
rand
signal
sin
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncat
strncmp
strncpy
strrchr
strstr
time
tolower
toupper

libgarglk

garglk_set_program_info
garglk_set_program_name
garglk_set_story_name
giblorb_set_resource_map
gli_startup
glk_exit
glk_fileref_create_by_name
glk_fileref_create_by_prompt
glk_fileref_destroy
glk_fileref_does_file_exist
glk_gestalt
glk_get_char_stream
glk_get_line_stream
glk_image_draw
glk_put_char_stream
glk_put_string
glk_put_string_stream
glk_put_string_uni
glk_request_char_event
glk_request_line_event
glk_request_line_event_uni
glk_request_timer_events
glk_schannel_create
glk_schannel_destroy
glk_schannel_play_ext
glk_schannel_set_volume
glk_schannel_stop
glk_select
glk_select_poll
glk_set_style
glk_set_window
glk_stream_close
glk_stream_get_position
glk_stream_open_file
glk_stream_set_position
glk_stylehint_set
glk_tick
glk_window_clear
glk_window_get_parent
glk_window_get_size
glk_window_get_stream
glk_window_move_cursor
glk_window_open
glk_window_set_arrangement
glk_window_set_echo_stream
glkunix_set_base_file
glkunix_stream_open_pathname

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 742KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02e8b657b7b20980dbee66f25d46cfac

Headers

File Characteristics

Imports

kernel32

msvcrt

libgarglk

Sections

.text Size: 76KB - Virtual size: 76KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 13KB - Virtual size: 13KB

.bss Size: - Virtual size: 742KB

.idata Size: 3KB - Virtual size: 3KB

.text
Size: 76KB - Virtual size: 76KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 13KB - Virtual size: 13KB

.bss
Size: - Virtual size: 742KB

.idata
Size: 3KB - Virtual size: 3KB