NEAS[.]370a0b766b6f75ab64d6a474e317d070[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.370a0b766b6f75ab64d6a474e317d070.exe
Size

73KB
MD5

370a0b766b6f75ab64d6a474e317d070
SHA1

024dbfc990dc3f7342433d8ddf667718cb5cf98a
SHA256

a0cb6298fbd43a618356ce9afd18dfed1da71ea78dbf37636eb6d53872f576bb
SHA512

80e8af159802abbf998b4aaac551519d624de53323da4488e73ccfb01335fba77d88f2b1162a0adc1807cdd012b9327bb3a5ddee7715b008d21974e01b464fcc
SSDEEP

1536:+4nToIf2W/nkQRZHaamLQHoIOah7Vryh7IO4cZlIXw6EpbS:bTBfHdRZH9mLQHuaBVGn4FXw6E1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.370a0b766b6f75ab64d6a474e317d070.exe

Files

NEAS.370a0b766b6f75ab64d6a474e317d070.exe
.dll windows:4 windows x86

07761085e6d5abbc4cbf0976d6b9a264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

_fdopen
__dllonexit
_errno
_filelengthi64
_vsnprintf
abort
clearerr
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
malloc
memcpy
memset
sprintf
strcat
strcpy
strerror
strlen

Exports

Exports

DllGetVersion
_dist_code
_length_code
_tr_align
_tr_flush_block
_tr_init
_tr_stored_block
_tr_tally
adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
deflate_copyright
get_crc_table
gzclearerr
gzclose
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
inflate_copyright
inflate_fast
inflate_table
uncompress
zError
z_errmsg
zcalloc
zcfree
zlibCompileFlags
zlibVersion

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 144B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

07761085e6d5abbc4cbf0976d6b9a264

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 512B - Virtual size: 112B

.bss Size: - Virtual size: 144B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 840B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 512B - Virtual size: 112B

.bss
Size: - Virtual size: 144B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 840B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 840B