NEAS[.]abfcef92fc544a1c35f1a8b6a8edafd0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.abfcef92fc544a1c35f1a8b6a8edafd0.exe
Size

47KB
MD5

abfcef92fc544a1c35f1a8b6a8edafd0
SHA1

7ddc3925cd694933435d638a1d588fd1199936d3
SHA256

43c96f37e8f21e0d663d0f16b254021bdb72e95b447c33c25c434b12ddbb948c
SHA512

a36b87cc4ad3aeaf94aa7cb9908ac937ac20d7a682600a889e50d861e2e38173ecb85219399e6fdc000ad9e68557db09ab2c6c397c432b216f7cd7b5c53d47a7
SSDEEP

768:ZT9t8i1fZtBjh/pQzyCTopUaTHbGsvBs3fLrnxf7ehlnQmahnHt2wj:ZUi1fZtpCTozHSsvBs3fXnp7eh5QmaNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.abfcef92fc544a1c35f1a8b6a8edafd0.exe

Files

NEAS.abfcef92fc544a1c35f1a8b6a8edafd0.exe
.exe windows:5 windows x86

d290e3e865087c8b447f3886a4bca350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
IsDebuggerPresent
OutputDebugStringA
GetCurrentThread
SetThreadPriority
VerSetConditionMask
VerifyVersionInfoA

xul

NS_LogRelease
NS_LogAddRef
NS_InitXPCOM2
NS_NewLocalFile
NS_CStringToUTF16
NS_CStringContainerInit2
NS_CStringContainerFinish
NS_StringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit
NS_ShutdownXPCOM
NS_LogCOMPtrAddRef
NS_LogCOMPtrRelease
NS_LogDtor
NS_LogCtor
NS_DebugBreak
NS_GetServiceManager
NS_GetComponentManager
NS_CStringSetDataRange
NS_TraceMallocPrintStackTrace
NS_CStringSetData
NS_CStringContainerInit
NS_TraceMallocGetStackTrace
NS_CStringGetData
NS_CStringCopy
NS_StringSetDataRange
NS_StringGetData
NS_UTF16ToCString
NS_StringGetMutableData
NS_CStringGetMutableData
NS_StringCopy
NS_CStringCloneData
NS_Alloc

mozalloc

moz_xrealloc
moz_free
moz_xmalloc

nss3

PR_SetCurrentThreadName
PR_CallOnce
PR_EnterMonitor
PL_HashTableAdd
PR_NewThreadPrivateIndex
PL_CompareValues
PL_NewHashTable
PR_NewLock
PR_Lock
PL_HashTableRawLookup
PR_WaitCondVar
PR_Wait
PR_ExitMonitor
PR_IntervalNow
PR_AssertCurrentThreadInMonitor
PR_AssertCurrentThreadOwnsLock
PR_SetThreadPrivate
PR_GetThreadPrivate
PR_Sleep
PR_MillisecondsToInterval
PR_GetEnv
PR_smprintf
PR_smprintf_free
PR_Notify
PR_DestroyMonitor
PR_NewMonitor
PR_GetCurrentThread
PR_sscanf
PR_Now
PR_Unlock

msvcr100d

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
_invoke_watson
_controlfp_s
?terminate@@YAXXZ
_vsnprintf
_initterm_e
_initterm
_CrtDbgReportW
_CrtSetCheckCount
__initenv
_cexit
_XcptFilter
_exit
__getmainargs
_amsg_exit
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_dup
_fdopen
vfprintf
fclose
srand
fflush
fprintf
__iob_func
_purecall
putchar
vprintf
printf
exit
strcmp
memcpy
memmove
fputs
memset
strlen
memcmp
_snprintf
rand

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d290e3e865087c8b447f3886a4bca350

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

xul

mozalloc

nss3

msvcr100d

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 968B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 968B

.reloc
Size: 3KB - Virtual size: 2KB