NEAS[.]a62cf3eae702dbf89143c4a59fd78fe0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a62cf3eae702dbf89143c4a59fd78fe0.exe
Size

76KB
MD5

a62cf3eae702dbf89143c4a59fd78fe0
SHA1

3983389fd9e38de8fd55a5018e49c75a54f85767
SHA256

43e4b41a9201d8296ea3db886fd4ca833fff36b8dfec529fb75be0bf0295a27a
SHA512

96b610795263aebdafa2acaaec48aff5c6fc8472e96be146dc40d17bfdc4716e892d4a2fd15decd334de0d81eaa54d1b88e8d946d438704d2c6663126d743f83
SSDEEP

1536:D7o0NFwSG2IO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:Dc0EJ2IO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a62cf3eae702dbf89143c4a59fd78fe0.exe

Files

NEAS.a62cf3eae702dbf89143c4a59fd78fe0.exe
.dll windows:6 windows x64

a716afa1a01f7571cbe156329de65673

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

factorygame-core

?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Malloc@FMemory@@SAPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
??0FString@@QEAA@XZ
??1FString@@QEAA@XZ
?FromValidENamePostInit@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetString@FConfigCacheIni@@QEAA_NPEB_W0AEAVFString@@AEBV2@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@W4ELoadModuleFlags@@@Z
?GConfig@@3PEAVFConfigCacheIni@@EA
?GEngineIni@@3VFString@@A

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_initterm_e
_configure_narrow_argv
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
terminate
_execute_onexit_table
_register_onexit_function

kernel32

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetStartupInfoW
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
IsProcessorFeaturePresent

Exports

Exports

InitializeModule

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a716afa1a01f7571cbe156329de65673

Headers

DLL Characteristics

File Characteristics

Imports

factorygame-core

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 256B

.pdata Size: 1024B - Virtual size: 648B

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 132B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 256B

.pdata
Size: 1024B - Virtual size: 648B

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 132B