NEAS[.]9e22d5d2c12e157e2780e1ae6a8f5020[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9e22d5d2c12e157e2780e1ae6a8f5020.exe
Size

236KB
MD5

9e22d5d2c12e157e2780e1ae6a8f5020
SHA1

18e8f6109d297276dad8539ba53854b24c114595
SHA256

5fb6440351b7c028044743079b4887bb6e6af9b605c2ed28622c2f2bfcd2e6dd
SHA512

e68016d0d7d60e90253104b3c0c8436e5b3b6f6681c8da07c4e24bcf4a75b26d18341ec061fe3a5aecc53314d227b98ed799fa32e6c0c1e1a7f6692c2453a948
SSDEEP

6144:pcquQwkJyBtUVKyF0bcEkwD618Bxf2GbhHNR+vI1GvMK4PANI+rHoZdhxYh:p7uQwkJyBtUVKyFkcEkwD618Bxf2Gb/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9e22d5d2c12e157e2780e1ae6a8f5020.exe

Files

NEAS.9e22d5d2c12e157e2780e1ae6a8f5020.exe
.dll windows:5 windows x86

dd035737fdbad16a95b8d983fb6b8707

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
FindFirstFileA
FindNextFileA
GetLastError
FormatMessageA
VirtualQuery
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemInfo
VirtualFree
VirtualProtect
IsBadReadPtr
VirtualAlloc
DecodePointer
SetEndOfFile
ReadConsoleW
ReadFile
SetFilePointerEx
HeapReAlloc
HeapSize
CreateFileW
SetStdHandle
GetConsoleMode
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFullPathNameA
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetDriveTypeW
GetCurrentDirectoryW
ExitProcess
HeapFree
HeapAlloc
LCMapStringW
CloseHandle
GetACP
GetStringTypeW
GetFileAttributesExW
WriteFile
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
GetConsoleCP

tier0

Warning
_AssertValidWritePtr
CommandLine_Tier0
MemFreeScratch
MemAllocScratch
?ConMsg@@YAXPBDZZ
?DevMsg@@YAXPBDZZ
Error
_AssertValidReadPtr
g_pMemAlloc
AssertValidStringPtr

vstdlib

KeyValuesSystem

Exports

Exports

GetGameDllBridge
GetVspBridge
cvar
g_pCVar

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd035737fdbad16a95b8d983fb6b8707

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 177KB - Virtual size: 177KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 7KB - Virtual size: 22KB

.gfids Size: 512B - Virtual size: 276B

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 177KB - Virtual size: 177KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 7KB - Virtual size: 22KB

.gfids
Size: 512B - Virtual size: 276B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 9KB - Virtual size: 8KB