NEAS[.]7d565e26072abb589371003448799110[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.7d565e26072abb589371003448799110.exe
Size

90KB
MD5

7d565e26072abb589371003448799110
SHA1

66870c2d2accc700732865c4d839e904dda91d7d
SHA256

6a87a1d730dc0b077318f31032cf707dda9d93816a57a418ae8eb8232600a435
SHA512

dc6a4a129320feef505937f460b23dac69680c01e1625d35d7fd654ffe674b2e64eb86fcc6828e018539ff48c1a01918d60f6cb2964df543deadd2947466889a
SSDEEP

1536:KbiZ3Y/TcgrJys4xWwEqTIm4gKN2P70R4R2wviOebAMMZA6JUWQHf:Pa/4Ns4xWYTKNSS4xviWMMZA6JUWQHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7d565e26072abb589371003448799110.exe

Files

NEAS.7d565e26072abb589371003448799110.exe
.dll windows:4 windows x64

8086d9f197a839911f8bf41325edf785

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

qt5core

_Z7qstrcmpRK10QByteArrayPKc
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QByteArray11fromRawDataEPKci
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray6appendEPKc
_ZN10QByteArray6appendERKS_
_ZN10QByteArray6appendEc
_ZN10QByteArray6removeEii
_ZN10QByteArrayC1EPKci
_ZN11QDataStream12setByteOrderENS_9ByteOrderE
_ZN11QDataStreamC1EP9QIODevice
_ZN11QDataStreamC1ERK10QByteArray
_ZN11QDataStreamD1Ev
_ZN11QDataStreamlsEa
_ZN11QDataStreamlsEi
_ZN11QDataStreamrsERa
_ZN11QDataStreamrsERi
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN8QVariantC1EiPKvj
_ZN8QVariantD1Ev
_ZN9QIODevice16startTransactionEv
_ZN9QIODevice19rollbackTransactionEv
_ZN9QIODevice4readEx
_ZN9QIODevice5writeEPKcx
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZNK10QByteArray10startsWithERKS_
_ZNK11QDataStream6statusEv
_ZNK11QMetaObject9classNameEv
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger7warningEPKcz
_ZNK9QIODevice10isReadableEv
_ZNK9QIODevice10isWritableEv
_ZNK9QIODevice6isOpenEv

qt5gui

_ZN11QColorSpaceC1ENS_15NamedColorSpaceE
_ZN11QColorSpaceC1ERKS_
_ZN11QColorSpaceC1Ev
_ZN11QColorSpaceD1Ev
_ZN11QColorSpaceaSERKS_
_ZN14QImageIOPlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN14QImageIOPlugin11qt_metacastEPKc
_ZN14QImageIOPlugin16staticMetaObjectE
_ZN14QImageIOPluginC2EP7QObject
_ZN14QImageIOPluginD2Ev
_ZN15QImageIOHandler11jumpToImageEi
_ZN15QImageIOHandler15jumpToNextImageEv
_ZN15QImageIOHandler9setDeviceEP9QIODevice
_ZN15QImageIOHandler9setFormatERK10QByteArray
_ZN15QImageIOHandler9setOptionENS_11ImageOptionERK8QVariant
_ZN15QImageIOHandlerC2Ev
_ZN15QImageIOHandlerD2Ev
_ZN6QImage13setColorSpaceERK11QColorSpace
_ZN6QImage16staticMetaObjectE
_ZN6QImage19convertToColorSpaceERK11QColorSpace
_ZN6QImage4bitsEv
_ZN6QImage8scanLineEi
_ZN6QImageC1ERK5QSizeNS_6FormatE
_ZN6QImageC1EiiNS_6FormatE
_ZN6QImageC1Ev
_ZN6QImageD1Ev
_ZN6QImageaSERKS_
_ZNK11QColorSpace16transferFunctionEv
_ZNK11QColorSpace7isValidEv
_ZNK11QColorSpace9primariesEv
_ZNK15QImageIOHandler10imageCountEv
_ZNK15QImageIOHandler14nextImageDelayEv
_ZNK15QImageIOHandler16currentImageRectEv
_ZNK15QImageIOHandler18currentImageNumberEv
_ZNK15QImageIOHandler4nameEv
_ZNK15QImageIOHandler6deviceEv
_ZNK15QImageIOHandler9loopCountEv
_ZNK15QImageIOHandler9setFormatERK10QByteArray
_ZNK6QImage10colorSpaceEv
_ZNK6QImage12bytesPerLineEv
_ZNK6QImage13constScanLineEi
_ZNK6QImage15hasAlphaChannelEv
_ZNK6QImage22convertToFormat_helperENS_6FormatE6QFlagsIN2Qt19ImageConversionFlagEE
_ZNK6QImage5depthEv
_ZNK6QImage5widthEv
_ZNK6QImage6formatEv
_ZNK6QImage6heightEv
_ZNK6QImage6isNullEv
_ZNK6QImage9constBitsEv

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
signal
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release

Exports

Exports

_ZN10QOIHandler4readEP6QImage
_ZN10QOIHandler5writeERK6QImage
_ZN10QOIHandler7canReadEP9QIODevice
_ZN10QOIHandlerC1Ev
_ZN10QOIHandlerC2Ev
_ZN10QOIHandlerD0Ev
_ZN10QOIHandlerD1Ev
_ZN17QtMetaTypePrivate23QMetaTypeFunctionHelperIN6QImage6FormatELb1EE8DestructEPv
_ZN17QtMetaTypePrivate23QMetaTypeFunctionHelperIN6QImage6FormatELb1EE9ConstructEPvPKv
_ZN17ScanLineConverter17convertedScanLineERK6QImagei
_ZN17ScanLineConverter19setTargetColorSpaceERK11QColorSpace
_ZN17ScanLineConverterC1ERKN6QImage6FormatE
_ZN17ScanLineConverterC1ERKS_
_ZN17ScanLineConverterC2ERKN6QImage6FormatE
_ZN17ScanLineConverterC2ERKS_
_ZN17ScanLineConverteraSERKS_
_ZN9QOIPlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9QOIPlugin11qt_metacastEPKc
_ZN9QOIPlugin16staticMetaObjectE
_ZN9QOIPlugin18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN9QOIPluginD0Ev
_ZN9QOIPluginD1Ev
_ZNK10QOIHandler14supportsOptionEN15QImageIOHandler11ImageOptionE
_ZNK10QOIHandler6optionEN15QImageIOHandler11ImageOptionE
_ZNK10QOIHandler7canReadEv
_ZNK17ScanLineConverter12bytesPerLineEv
_ZNK17ScanLineConverter12targetFormatEv
_ZNK17ScanLineConverter16targetColorSpaceEv
_ZNK17ScanLineConverter28isColorSpaceConversionNeededERK6QImageRK11QColorSpace
_ZNK9QOIPlugin10metaObjectEv
_ZNK9QOIPlugin12capabilitiesEP9QIODeviceRK10QByteArray
_ZNK9QOIPlugin6createEP9QIODeviceRK10QByteArray
_ZTI10QOIHandler
_ZTI14QImageIOPlugin
_ZTI15QImageIOHandler
_ZTI7QObject
_ZTI9QOIPlugin
_ZTS10QOIHandler
_ZTS14QImageIOPlugin
_ZTS15QImageIOHandler
_ZTS7QObject
_ZTS9QOIPlugin
_ZTV10QOIHandler
_ZTV9QOIPlugin
_ZZN18QMetaTypeIdQObjectIN6QImage6FormatELi16EE14qt_metatype_idEvE11metatype_id
qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/16
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/43
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/69
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/82
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8086d9f197a839911f8bf41325edf785

Headers

File Characteristics

Imports

qt5core

qt5gui

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 2KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 128B

.pdata Size: 1024B - Virtual size: 948B

.xdata Size: 1024B - Virtual size: 752B

.bss Size: - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 2KB

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 192B

/16 Size: 512B - Virtual size: 80B

/31 Size: 8KB - Virtual size: 7KB

/43 Size: 512B - Virtual size: 329B

/57 Size: 1024B - Virtual size: 546B

/69 Size: 512B - Virtual size: 72B

/82 Size: 512B - Virtual size: 155B

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 2KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 128B

.pdata
Size: 1024B - Virtual size: 948B

.xdata
Size: 1024B - Virtual size: 752B

.bss
Size: - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 192B

/16
Size: 512B - Virtual size: 80B

/31
Size: 8KB - Virtual size: 7KB

/43
Size: 512B - Virtual size: 329B

/57
Size: 1024B - Virtual size: 546B

/69
Size: 512B - Virtual size: 72B

/82
Size: 512B - Virtual size: 155B