NEAS[.]c46560eca07597fdbfdb3eae5f5e4160[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.c46560eca07597fdbfdb3eae5f5e4160.exe
Size

45KB
MD5

c46560eca07597fdbfdb3eae5f5e4160
SHA1

f4a384245cb7699c9bf8a684b3ce116224fc3320
SHA256

ec3144044337c12b9becbdc0940faaef0b415b186437094ae3e08ab94b903e5e
SHA512

97201e37897cdd9289c9ae66b167cc8dc657f05613fd6472b7d5f6674840eee97891f8eef43a501e071ee77e92db7638eb7b13e4443643287c4dc90492ca86e6
SSDEEP

768:jcP5LMMImzv3d7e0xRzxksQEzF7shX63Fc7DYenjmzupliJM3KlQWYxC:jUIJm57jxRFksQE54mzp+6QI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c46560eca07597fdbfdb3eae5f5e4160.exe

Files

NEAS.c46560eca07597fdbfdb3eae5f5e4160.exe
.dll windows:6 windows x64

ca8d422a5fce99182316ce9aa82afb85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_IntersectRectAndLine

python310

PyCapsule_New
PySequence_Check
PyObject_IsInstance
PyNumber_Index
PyDict_GetItemString
PyObject_CallObject
PyObject_HasAttrString
PyTuple_Type
_Py_NotImplementedStruct
PyNumber_AsSsize_t
PyExc_TypeError
PyCapsule_Type
PyCallable_Check
PyExc_IndexError
_Py_TrueStruct
PyDict_DelItemString
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyList_Append
PyExc_ValueError
PyErr_SetString
PyExc_AttributeError
PyFloat_FromDouble
PyDict_Size
PyDict_SetItemString
_Py_EllipsisObject
PyTuple_New
_Py_NoneStruct
PyExc_MemoryError
PySlice_Unpack
PyLong_FromLong
PyLong_FromSsize_t
PyErr_Occurred
PySequence_GetItem
PyImport_ImportModule
PySlice_Type
_Py_BuildValue_SizeT
PyBool_FromLong
PyErr_Clear
PyObject_GetAttrString
PyType_Ready
PyModule_Create2
PyList_New
PyUnicode_FromFormat
PyObject_ClearWeakRefs
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyModule_AddObject
PyCapsule_GetPointer
PyDict_Next
_Py_Dealloc
PySlice_AdjustIndices
PySequence_Size
PyIndex_Check

kernel32

DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

floor
ceil

Exports

Exports

PyInit_rect

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca8d422a5fce99182316ce9aa82afb85

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python310

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 432B

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 432B