NEAS[.]14f2a936f00c3986349e84e90243b5d0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14f2a936f00c3986349e84e90243b5d0.exe
Size

384KB
MD5

14f2a936f00c3986349e84e90243b5d0
SHA1

6bc6e6c82c4ed7e27296a5ba6f127d2d19ac8cb7
SHA256

44b149e962a474d4ba9c9d72e4b4d8fe61cd5a9c271d8929cf549849a3e9cef6
SHA512

b8ff0e6f0a6384b5cfd3bf237ea157188b66466bc071e29f65fb1c910cdffc5d401a3b38ccee9449b7f5dc1f588c303f586d0a0b9234373d8d18c3d6144d3e40
SSDEEP

6144:g3WJCCG9mmeyaVPqGhmb7SeJsMpqm8Ae6Mf5RsYtniV0Y6dlAOcl7ZPiBTihpTn4:XxlmMVyGh8+e6MpqxGMfftiwdly7ZPAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14f2a936f00c3986349e84e90243b5d0.exe

Files

NEAS.14f2a936f00c3986349e84e90243b5d0.exe
.dll windows:6 windows x86

b7c8993f10dec27599332ce85a1de38a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentProcess
GetProcAddress
LoadLibraryA
CloseHandle
RaiseException
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetCurrentThreadId
SetThreadPriority
FileTimeToLocalFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
HeapSize
CreateFileW
WriteConsoleW
DecodePointer
DeleteFileW
GetFileAttributesW
GetFileSize
MoveFileW

Exports

Exports

g_gcsl_log_callback
g_gcsl_log_enabled_pkgs
g_gcsl_signal_callback
g_gcsl_thread_registrants
g_gcsl_thread_store_key
gcsl_fs_marker_end
gcsl_fs_marker_initialize
gcsl_fs_marker_start
gcsl_memory_alloc
gcsl_memory_alloc2
gcsl_memory_alloc_count
gcsl_memory_alloc_max
gcsl_memory_alloc_trace
gcsl_memory_alloc_trace_set
gcsl_memory_calloc
gcsl_memory_calloc2
gcsl_memory_checkpoint_report
gcsl_memory_checkpoint_set
gcsl_memory_dup
gcsl_memory_dup2
gcsl_memory_free
gcsl_memory_heap_dump
gcsl_memory_heap_max
gcsl_memory_heap_now
gcsl_memory_heap_warn
gcsl_memory_initialize
gcsl_memory_marker_end
gcsl_memory_marker_initialize
gcsl_memory_marker_start
gcsl_memory_memcmp
gcsl_memory_memcpy
gcsl_memory_memmove
gcsl_memory_memset
gcsl_memory_name_set
gcsl_memory_realloc
gcsl_memory_realloc2
gcsl_memory_register_provider_interface
gcsl_memory_shutdown
gcsl_memory_sizeof
gcsl_time_marker_end
gcsl_time_marker_initialize
gcsl_time_marker_start
gnsdk_fp_data_addref
gnsdk_fp_data_get_info
gnsdk_fp_data_release
gnsdk_fp_data_render
gnsdk_fp_fingerprinter_audio_create
gnsdk_fp_fingerprinter_audio_done
gnsdk_fp_fingerprinter_audio_write
gnsdk_fp_fingerprinter_audio_write_ex
gnsdk_fp_fingerprinter_release
gnsdk_fp_fingerprinter_video_create
gnsdk_fp_fingerprinter_video_done
gnsdk_fp_fingerprinter_video_write
gnsdk_fp_get_build_date
gnsdk_fp_get_version
gnsdk_fp_initialize
gnsdk_fp_shutdown
gnsdk_fp_string_free

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7c8993f10dec27599332ce85a1de38a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 157KB - Virtual size: 156KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 17KB - Virtual size: 30KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 149KB - Virtual size: 148KB

.text
Size: 157KB - Virtual size: 156KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 17KB - Virtual size: 30KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 149KB - Virtual size: 148KB