NEAS[.]d374e1d23f947da77960a1730f1ad2f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d374e1d23f947da77960a1730f1ad2f0.exe
Size

99KB
MD5

d374e1d23f947da77960a1730f1ad2f0
SHA1

0e76383f15b419f425f4f9d19b785fedc70f7a75
SHA256

4ade07f746a5c51165926bedd4c4cc6b0cb3f6f337ade65ed4e759b5b9cfa0e3
SHA512

92169fbd354f90a228991fe98ebc46d43d3aa60ef4295d3d514de94335232e930d844d19dc6fab19b138a692ae66404c1c3c1bca76b4b047b166ab7b2dffdfee
SSDEEP

1536:TNNU0mtNppzSpJm70H242J4Yp4F6AdjqW7GdNLIs8LTFS4:oH7z4JY0HsvUpB76OC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d374e1d23f947da77960a1730f1ad2f0.exe

Files

NEAS.d374e1d23f947da77960a1730f1ad2f0.exe
.dll windows:4 windows x64

c59cf95a2f865af4a8b276bc25ac3d87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strlen
strncmp
strtol
strtoul
tolower
ungetc
vfprintf

libglib-2.0-0

g_assertion_message_expr
g_free
g_intern_static_string
g_log
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_rec_mutex_lock
g_rec_mutex_unlock
g_return_if_fail_warning
g_slist_append
g_slist_delete_link
g_slist_foreach
g_slist_free
g_strdup_printf

libgobject-2.0-0

g_enum_register_static
g_object_class_install_property
g_object_new
g_object_unref
g_param_spec_enum
g_param_spec_int
g_param_spec_uint
g_type_check_instance_is_a
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static
g_type_register_static_simple
g_value_get_enum
g_value_get_int
g_value_get_uint
g_value_set_enum
g_value_set_int
g_value_set_uint

libgstaudio-1.0-0

gst_audio_buffer_truncate
gst_audio_format_from_string
gst_audio_format_to_string
gst_audio_info_init
gst_audio_info_is_equal
gst_audio_info_set_format
gst_audio_info_to_caps
gst_audio_meta_api_get_type
gst_buffer_add_audio_meta

libgstbase-1.0-0

gst_adapter_available
gst_adapter_clear
gst_adapter_new
gst_adapter_push
gst_adapter_take_buffer

libgstreamer-1.0-0

_gst_buffer_type
_gst_debug_category_new
_gst_debug_min
_gst_debug_register_funcptr
_gst_element_error_printf
gst_allocation_params_init
gst_buffer_append
gst_buffer_copy_region
gst_buffer_get_meta
gst_buffer_get_size
gst_buffer_new_allocate
gst_caps_get_size
gst_caps_get_structure
gst_caps_is_subset
gst_debug_log
gst_element_add_pad
gst_element_class_get_pad_template
gst_element_get_type
gst_element_message_full
gst_element_post_message
gst_event_get_seqnum
gst_event_new_caps
gst_event_new_eos
gst_event_new_flush_start
gst_event_new_flush_stop
gst_event_new_segment
gst_event_new_stream_start
gst_event_new_tag
gst_event_new_toc
gst_event_parse_seek
gst_event_parse_toc_select
gst_event_set_group_id
gst_event_set_seqnum
gst_flow_get_name
gst_format_get_name
gst_message_new_duration_changed
gst_message_new_segment_start
gst_mini_object_make_writable
gst_mini_object_ref
gst_mini_object_unref
gst_object_unref
gst_pad_check_reconfigure
gst_pad_create_stream_id
gst_pad_event_default
gst_pad_get_allowed_caps
gst_pad_get_pad_template_caps
gst_pad_needs_reconfigure
gst_pad_new_from_template
gst_pad_pause_task
gst_pad_peer_query
gst_pad_peer_query_duration
gst_pad_push
gst_pad_push_event
gst_pad_query_default
gst_pad_set_chain_function_full
gst_pad_set_event_function_full
gst_pad_set_query_function_full
gst_pad_start_task
gst_pad_stop_task
gst_query_add_allocation_param
gst_query_get_n_allocation_params
gst_query_new_allocation
gst_query_parse_duration
gst_query_parse_nth_allocation_param
gst_query_parse_position
gst_query_parse_seeking
gst_query_set_duration
gst_query_set_nth_allocation_param
gst_query_set_position
gst_query_set_seeking
gst_segment_do_seek
gst_segment_init
gst_stream_error_quark
gst_structure_copy
gst_structure_fixate_field_nearest_int
gst_structure_fixate_field_string
gst_structure_free
gst_structure_get_field_type
gst_structure_get_int
gst_structure_get_string
gst_structure_has_field
gst_tag_list_add
gst_tag_list_merge
gst_tag_list_new_empty
gst_toc_append_entry
gst_toc_entry_new
gst_toc_entry_set_start_stop_times
gst_toc_entry_set_tags
gst_toc_new
gst_toc_set_tags
gst_util_group_id_next
gst_util_uint64_scale_int

libintl-8

DllMain

Exports

Exports

gst_nonstream_audio_decoder_allocate_output_buffer
gst_nonstream_audio_decoder_get_downstream_info
gst_nonstream_audio_decoder_get_type
gst_nonstream_audio_decoder_handle_loop
gst_nonstream_audio_decoder_set_output_format
gst_nonstream_audio_decoder_set_output_format_simple
gst_planar_audio_adapter_available
gst_planar_audio_adapter_clear
gst_planar_audio_adapter_configure
gst_planar_audio_adapter_distance_from_discont
gst_planar_audio_adapter_dts_at_discont
gst_planar_audio_adapter_flush
gst_planar_audio_adapter_get_buffer
gst_planar_audio_adapter_get_type
gst_planar_audio_adapter_new
gst_planar_audio_adapter_offset_at_discont
gst_planar_audio_adapter_prev_dts
gst_planar_audio_adapter_prev_offset
gst_planar_audio_adapter_prev_pts
gst_planar_audio_adapter_pts_at_discont
gst_planar_audio_adapter_push
gst_planar_audio_adapter_take_buffer
nonstream_audiodecoder_debug

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c59cf95a2f865af4a8b276bc25ac3d87

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libglib-2.0-0

libgobject-2.0-0

libgstaudio-1.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

libintl-8

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 69KB

.data Size: 512B - Virtual size: 400B

.rdata Size: 13KB - Virtual size: 12KB

.pdata Size: 2KB - Virtual size: 1KB

.xdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 3KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 144B

.text
Size: 69KB - Virtual size: 69KB

.data
Size: 512B - Virtual size: 400B

.rdata
Size: 13KB - Virtual size: 12KB

.pdata
Size: 2KB - Virtual size: 1KB

.xdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 144B