NEAS[.]1e2e13208b68ba56c4571b7fd9546af0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.1e2e13208b68ba56c4571b7fd9546af0.exe
Size

77KB
MD5

1e2e13208b68ba56c4571b7fd9546af0
SHA1

4700c173ae802e34f48d5032f5a2e79c91335489
SHA256

fb8a299a46b618fd577297a9b975ac793de10c93839d3413fa65a283c4cf831d
SHA512

29bdbe20bbb1d2e22552fcb813caab12fc9e62b167310d63b5284068735693eb8e8b86bff80189d4beae477a3f22bc172bb0f2e5f1d46816001c4a1a08205c19
SSDEEP

1536:I97pOMNFbO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:I97pOCFbO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1e2e13208b68ba56c4571b7fd9546af0.exe

Files

NEAS.1e2e13208b68ba56c4571b7fd9546af0.exe
.dll windows:6 windows x64

d60d19968c093345b3b12b61a89f7311

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

factorygame-core

?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_cexit
_register_onexit_function
_seh_filter_dll
_initterm_e
_initterm
terminate
_initialize_narrow_environment
_configure_narrow_argv

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter

Exports

Exports

?StatPtr_STAT_UserDataPT_ClearData_PT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_ClearData_PT@Chaos@@@@A
?StatPtr_STAT_UserDataPT_GetData_PT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_GetData_PT@Chaos@@@@A
?StatPtr_STAT_UserDataPT_RemoveData_GT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_RemoveData_GT@Chaos@@@@A
?StatPtr_STAT_UserDataPT_RemoveData_PT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_RemoveData_PT@Chaos@@@@A
?StatPtr_STAT_UserDataPT_SetData_GT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_SetData_GT@Chaos@@@@A
?StatPtr_STAT_UserDataPT_UpdateData_PT@Chaos@@3U?$FThreadSafeStaticStat@UFStat_STAT_UserDataPT_UpdateData_PT@Chaos@@@@A
InitializeModule

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d60d19968c093345b3b12b61a89f7311

Headers

DLL Characteristics

File Characteristics

Imports

factorygame-core

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 288B

.pdata Size: 1024B - Virtual size: 672B

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 120B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 288B

.pdata
Size: 1024B - Virtual size: 672B

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 120B