NEAS[.]663ec90b3e8ab1b422c5b0c18cbd3050[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.663ec90b3e8ab1b422c5b0c18cbd3050.exe
Size

20KB
MD5

663ec90b3e8ab1b422c5b0c18cbd3050
SHA1

25344e716e216f6fca396643df070d4fe8742690
SHA256

14865950c839a9c0301bd0e2aa13e9243400ec3ea6b0b0c2dde61d96a627be47
SHA512

a936148ac9f8044eb3d864bb260196aef7c288717267bb9aae3c2545f699e08cfb62809febc0c8de2eee662dd11f85c10c2d7266d58cd3bdf9a1e2c5c097a342
SSDEEP

384:hX4/PgWh3WR7yrpXOLsXZMvhA8Zsb8X6BQTScMNUjI:1ucYqZsAX6ak

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.663ec90b3e8ab1b422c5b0c18cbd3050.exe

Files

NEAS.663ec90b3e8ab1b422c5b0c18cbd3050.exe
.dll windows:6 windows x64

97331977b24ed781d568531f14e2e164

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_StopTextInput
SDL_GetKeyboardFocus
SDL_SetModState
SDL_SetTextInputRect
SDL_GetRenderer
SDL_StartTextInput
SDL_GetModState
SDL_GetKeyboardState
SDL_RenderGetScale
SDL_GetKeyFromName
SDL_WasInit
SDL_strcasecmp
SDL_GetScancodeFromKey
SDL_RenderGetViewport
SDL_GetKeyName

python310

PyUnicode_FromString
PyCapsule_Type
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyUnicode_FromFormat
PyLong_AsLong
PyObject_CallFunctionObjArgs
_PyArg_ParseTuple_SizeT
PyModule_AddObject
PyCapsule_GetPointer
_Py_Dealloc
PyTuple_Type
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyErr_SetString
PyTuple_New
_Py_NoneStruct
PyLong_FromLong
PyExc_Warning
PyErr_Occurred
PyImport_ImportModule
PyErr_WarnEx
_Py_BuildValue_SizeT
PyBool_FromLong
PyExc_TypeError

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_seh_filter_dll

Exports

Exports

PyInit_key

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97331977b24ed781d568531f14e2e164

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python310

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 696B

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 396B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 696B

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 396B