NEAS[.]a0458a4503f4fc9e68ded055c1d20110[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a0458a4503f4fc9e68ded055c1d20110.exe
Size

63KB
MD5

a0458a4503f4fc9e68ded055c1d20110
SHA1

0d098ccc4693892288cd3dab42b8ead2ef97dd40
SHA256

9453f1e842d0b34e5f3dc05b39120aef9eb17fb786e06ca48d78d04aef7b742c
SHA512

c75a45b6945fbb1721a4adee638cc77f382dddfcbb3805f1fb9c3ce8f75196f71483429e920f3d1a08c4621530521a404a1a663e585af52eeaab65efc6b7d6d3
SSDEEP

768:isUeYWuY+migf6FYqzuLSTb/kVxqkUyW35N023pK:eeYfZgf6q9LATkVlUV35N023pK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0458a4503f4fc9e68ded055c1d20110.exe

Files

NEAS.a0458a4503f4fc9e68ded055c1d20110.exe
.dll windows:4 windows x64

f46ce0eb6894e7e54e34ee9c997a7be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libkf6archive

_ZN4KZipC1EP9QIODevice
_ZN4KZipD1Ev
_ZN8KArchive4openE6QFlagsIN13QIODeviceBase12OpenModeFlagEE
_ZNK17KArchiveDirectory5entryERK7QString
_ZNK8KArchive9directoryEv

qt6core

_ZN10QArrayData10deallocateEPS_xx
_ZN10QByteArrayC1EPKcx
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject5eventEP6QEvent
_ZN9QIODevice4peekEPcx
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger7warningEPKcz
_ZNK9QIODevice10isReadableEv
_ZNK9QIODevice6isOpenEv
qt_version_tag_6_5

qt6gui

_ZN14QImageIOPlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN14QImageIOPlugin11qt_metacastEPKc
_ZN14QImageIOPlugin16staticMetaObjectE
_ZN14QImageIOPluginC2EP7QObject
_ZN14QImageIOPluginD2Ev
_ZN15QImageIOHandler11jumpToImageEi
_ZN15QImageIOHandler15jumpToNextImageEv
_ZN15QImageIOHandler5writeERK6QImage
_ZN15QImageIOHandler9setDeviceEP9QIODevice
_ZN15QImageIOHandler9setFormatERK10QByteArray
_ZN15QImageIOHandler9setOptionENS_11ImageOptionERK8QVariant
_ZN15QImageIOHandlerC2Ev
_ZN15QImageIOHandlerD2Ev
_ZN6QImage12loadFromDataE14QByteArrayViewPKc
_ZNK15QImageIOHandler10imageCountEv
_ZNK15QImageIOHandler14nextImageDelayEv
_ZNK15QImageIOHandler14supportsOptionENS_11ImageOptionE
_ZNK15QImageIOHandler16currentImageRectEv
_ZNK15QImageIOHandler18currentImageNumberEv
_ZNK15QImageIOHandler6deviceEv
_ZNK15QImageIOHandler6optionENS_11ImageOptionE
_ZNK15QImageIOHandler9loopCountEv
_ZNK15QImageIOHandler9setFormatERK10QByteArray

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcmp
realloc
strcmp
strlen
strncmp
vfprintf

libstdc++-6

_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release

Exports

Exports

_ZN10KraHandler4readEP6QImage
_ZN10KraHandler7canReadEP9QIODevice
_ZN10KraHandlerC1Ev
_ZN10KraHandlerC2Ev
_ZN10KraHandlerD0Ev
_ZN10KraHandlerD1Ev
_ZN11QMetaObject16staticMetaObjectIL_ZN14QImageIOPlugin16staticMetaObjectEEEEPKS_v
_ZN9KraPlugin11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9KraPlugin11qt_metacastEPKc
_ZN9KraPlugin16staticMetaObjectE
_ZN9KraPlugin18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN9KraPluginD0Ev
_ZN9KraPluginD1Ev
_ZN9QtPrivate16QMetaTypeForTypeI9KraPluginE4nameE
_ZN9QtPrivate17MetaObjectForTypeI9KraPluginvE18metaObjectFunctionEPKNS_18QMetaTypeInterfaceE
_ZN9QtPrivate25QMetaTypeInterfaceWrapperI9KraPluginE8metaTypeE
_ZNK10KraHandler7canReadEv
_ZNK9KraPlugin10metaObjectEv
_ZNK9KraPlugin12capabilitiesEP9QIODeviceRK10QByteArray
_ZNK9KraPlugin6createEP9QIODeviceRK10QByteArray
_ZTI10KraHandler
_ZTI14QImageIOPlugin
_ZTI15QImageIOHandler
_ZTI7QObject
_ZTI9KraPlugin
_ZTS10KraHandler
_ZTS14QImageIOPlugin
_ZTS15QImageIOHandler
_ZTS7QObject
_ZTS9KraPlugin
_ZTV10KraHandler
_ZTV9KraPlugin
_ZZN9QtPrivate16QMetaTypeForTypeI9KraPluginE13getDefaultCtrEvENUlPKNS_18QMetaTypeInterfaceEPvE_4_FUNES5_S6_
_ZZN9QtPrivate16QMetaTypeForTypeI9KraPluginE7getDtorEvENUlPKNS_18QMetaTypeInterfaceEPvE_4_FUNES5_S6_
qt_plugin_instance
qt_plugin_query_metadata_v2
qt_version_tag_6_5_used

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/16
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/27
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/42
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/54
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/68
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/93
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f46ce0eb6894e7e54e34ee9c997a7be0

Headers

DLL Characteristics

File Characteristics

Imports

libkf6archive

qt6core

qt6gui

kernel32

msvcrt

libstdc++-6

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 256B

.rdata Size: 2KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 128B

/16 Size: 512B - Virtual size: 16B

.pdata Size: 1024B - Virtual size: 756B

.xdata Size: 1024B - Virtual size: 532B

.bss Size: - Virtual size: 288B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 216B

/27 Size: 512B - Virtual size: 80B

/42 Size: 4KB - Virtual size: 3KB

/54 Size: 512B - Virtual size: 175B

/68 Size: 512B - Virtual size: 284B

/80 Size: 512B - Virtual size: 72B

/93 Size: 512B - Virtual size: 187B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 2KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 128B

/16
Size: 512B - Virtual size: 16B

.pdata
Size: 1024B - Virtual size: 756B

.xdata
Size: 1024B - Virtual size: 532B

.bss
Size: - Virtual size: 288B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 216B

/27
Size: 512B - Virtual size: 80B

/42
Size: 4KB - Virtual size: 3KB

/54
Size: 512B - Virtual size: 175B

/68
Size: 512B - Virtual size: 284B

/80
Size: 512B - Virtual size: 72B

/93
Size: 512B - Virtual size: 187B