NEAS[.]31e9327f16fcb5c40e9c2119f4a8b9d0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.31e9327f16fcb5c40e9c2119f4a8b9d0.exe
Size

237KB
MD5

31e9327f16fcb5c40e9c2119f4a8b9d0
SHA1

53fd9d6fe1b2e26f28ba5b251e73cecad88ccf6e
SHA256

c71f0726e861efa42d8690e518206af04ac101e71c3fd70b8c05a0d8b0b7e80f
SHA512

87c2499153541df8c7aec5c9f827f4ad10a79d4a799c66b9bb7dc5812cd1281e8ce4877140c93bcd6b48198b3b381e3b33deeb1be18cac79eebf7da1f2ea81da
SSDEEP

3072:bN2dAESJN3yeTYSwaCPM8ul3/eo5khHPljLtxZeqW9Fr+nV/g12ihC7Ui0QWpu/:bN2d/SJ9ybit8uyRnTorogks0kpu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31e9327f16fcb5c40e9c2119f4a8b9d0.exe

Files

NEAS.31e9327f16fcb5c40e9c2119f4a8b9d0.exe
.dll windows:4 windows x64

0efa7176f5dd196db97b024eee051575

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libvlccore

es_format_Clean
es_format_Init
var_Create
var_GetChecked
var_Inherit
vlc_dialog_display_error
vlc_frame_Alloc
vlc_frame_Release
vlc_gettext
vlc_object_Log
vlc_object_vaLog

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetFilePointer
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_exit
_findclose
_initterm
_lock
_lseeki64
_mkdir
_stat64
_stricmp
_strnicmp
_unlock
_wassert
_wfindfirst64
_wfindnext64
_wopen
_wstat64
abort
atoi
calloc
fputc
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memset
perror
realloc
strchr
strcmp
strerror
strlen
strncat
strncmp
strncpy
strtok
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
_write
_strdup
_read
_open
_close

shell32

SHGetFolderPathA

Exports

Exports

vlc_entry
vlc_entry_api_version
vlc_entry_copyright
vlc_entry_license

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0efa7176f5dd196db97b024eee051575

Headers

DLL Characteristics

File Characteristics

Imports

libvlccore

advapi32

kernel32

msvcrt

shell32

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 193KB

.data Size: 512B - Virtual size: 240B

.rdata Size: 25KB - Virtual size: 25KB

.pdata Size: 5KB - Virtual size: 4KB

.xdata Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 5KB

.edata Size: 512B - Virtual size: 172B

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 512B - Virtual size: 120B

/4 Size: 512B - Virtual size: 32B

.text
Size: 193KB - Virtual size: 193KB

.data
Size: 512B - Virtual size: 240B

.rdata
Size: 25KB - Virtual size: 25KB

.pdata
Size: 5KB - Virtual size: 4KB

.xdata
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 172B

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 512B - Virtual size: 120B

/4
Size: 512B - Virtual size: 32B