NEAS[.]6039613873087b9d0fdd0bd3834d54f0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.6039613873087b9d0fdd0bd3834d54f0.exe
Size

74KB
MD5

6039613873087b9d0fdd0bd3834d54f0
SHA1

0b4f99e06c41ab52a26fe247cc4ff9ff7c76a714
SHA256

835c1a51d055aa24b7d51e14a1984eba78638b3a2e427e991f3a8481bd846db8
SHA512

e8fd9d89bd7f89d9b1a474093e7cfd1e657e7f4170e08feab710cc459e7036cc50e320c13e2a666284e6b7c27dbbf64e16efa270b573106b947ff89e76ed0fc8
SSDEEP

1536:aX9ixO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:atixO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6039613873087b9d0fdd0bd3834d54f0.exe

Files

NEAS.6039613873087b9d0fdd0bd3834d54f0.exe
.dll windows:6 windows x64

60a645534777a4a1d967bb493656713e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core

?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_cexit
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
terminate
_initialize_narrow_environment
_configure_narrow_argv

kernel32

IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter

Exports

Exports

InitializeModule

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60a645534777a4a1d967bb493656713e

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 240B

.pdata Size: 1024B - Virtual size: 600B

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 240B

.pdata
Size: 1024B - Virtual size: 600B

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 108B