NEAS[.]58f7c04d6af0025053cc128f6fbd2e40[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.58f7c04d6af0025053cc128f6fbd2e40.exe
Size

16KB
MD5

58f7c04d6af0025053cc128f6fbd2e40
SHA1

282a23dae267b3c64ed91d5ce72aa759291e36d1
SHA256

0b923e5cc149731c1a85519423536791b41c2ceb21404a605053fbcf29256a8e
SHA512

b6d9ae00f2ea6a191bcf3acbc7c7b6d056138026e19e6cdd33a8e0583f572531980053ef2561bfc842aab53fc1013bbf6dab566fe31085fff184400c0d07624d
SSDEEP

192:qkpHTsyMgX3xB6MD9zuiJ0kSLMzj1jfGb8YVU4nRv3Of3XxPVR6NPhLVL1Tj0bui:qeH4A3L6MJz/CkSLu/uFOfhPVE3NTYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58f7c04d6af0025053cc128f6fbd2e40.exe

Files

NEAS.58f7c04d6af0025053cc128f6fbd2e40.exe
.dll windows:5 windows x86

08327d5d30bca9b4dc170033edf6431a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tbgeneric

??0DataLng@@QAE@J@Z
??0DataInt@@QAE@H@Z
??1DataInt@@UAE@XZ
??1DataStr@@UAE@XZ
??1DataLng@@UAE@XZ
??0DataStr@@QAE@XZ

tboledb

??1SqlAddOnFieldsColumn@@UAE@XZ
??0CRTAddOnNewFields@@QAE@PAUCRuntimeClass@@ABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@0ABVCTBNamespace@@@Z
??1CRTAddOnNewFields@@UAE@XZ
?GetThisClass@SqlAddOnFieldsColumn@@SGPAUCRuntimeClass@@XZ
??0SqlAddOnFieldsColumn@@QAE@XZ
?GetTableName@SqlAddOnFieldsColumn@@UBEABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ
?BindDataObj@SqlRecord@@QAEXHABV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@AAVDataObj@@@Z
?Add@CRTAddOnNewFieldsArray@@QAEXPAVCRTAddOnNewFields@@@Z

tbgenlib

?AOI_RegisterTables@AddOnInterfaceObj@@UAEHPAVSqlConnection@@PBGPAVCTBNamespace@@@Z
?AfxGetTbCmdManager@@YGPAVCTbCommandInterface@@XZ
??0AddOnInterfaceObj@@QAE@XZ
?GetRuntimeClass@AddOnInterfaceObj@@UBEPAUCRuntimeClass@@XZ
?AOI_InitDLL@AddOnInterfaceObj@@UAEXXZ
?AOI_SetAddOnMod@AddOnInterfaceObj@@UAEXXZ
?AOI_RegisterGlobalObjects@AddOnInterfaceObj@@UAEXXZ
?AOI_RegisterTemplates@AddOnInterfaceObj@@UAEXIPAVCTBNamespace@@@Z
?AOI_RegisterFunctions@AddOnInterfaceObj@@UAEXPAVCTBNamespace@@@Z
?AOI_RegisterParsedControls@AddOnInterfaceObj@@UAEXABVCTBNamespace@@@Z
?AOI_AttachClientDocs@AddOnInterfaceObj@@UAEXPAVCAbstractFormDoc@@PAVCClientDocArray@@ABVCTBNamespace@@@Z
??1AddOnInterfaceObj@@UAE@XZ
?AOI_EndRegistration@AddOnInterfaceObj@@UAEHABVCTBNamespace@@@Z
?AOI_BeginRegistration@AddOnInterfaceObj@@UAEHABVCTBNamespace@@@Z
?AOI_RegisterOSLObjects@AddOnInterfaceObj@@UAEHXZ
?AOI_RegisterFormatters@AddOnInterfaceObj@@UAEXABVCTBNamespace@@@Z
?AOI_RegisterHotLinks@AddOnInterfaceObj@@UAEXABVCTBNamespace@@@Z
?AOI_AttachFamilyClientDocs@AddOnInterfaceObj@@UAEXPAVCAbstractFormDoc@@PAVCClientDocArray@@ABVCTBNamespace@@@Z

salesdbl

?GetThisClass@TSaleDocDetail@@SGPAUCRuntimeClass@@XZ

mfc100u

ord286
ord266
ord6036
ord1953
ord408
ord2053
ord1298
ord902
ord12153
ord1300
ord1934

msvcr100

_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
__CxxFrameHandler3
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter

kernel32

DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
EncodePointer

Exports

Exports

??0TSaleDocDetailAddOnFlds@@QAE@XZ
??1TSaleDocDetailAddOnFlds@@UAE@XZ
??_7TSaleDocDetailAddOnFlds@@6B@
?BindAddOnFields@TSaleDocDetailAddOnFlds@@UAEHH@Z
?CreateObject@TSaleDocDetailAddOnFlds@@SGPAVCObject@@XZ
?GetRuntimeClass@TSaleDocDetailAddOnFlds@@UBEPAUCRuntimeClass@@XZ
?GetThisClass@TSaleDocDetailAddOnFlds@@SGPAUCRuntimeClass@@XZ
?InitAddOnFields@TSaleDocDetailAddOnFlds@@UAEXXZ
?ModifyAddOnFieldsValue@TSaleDocDetailAddOnFlds@@UAEXPAVSqlRecord@@@Z
?_GetBaseClass@TSaleDocDetailAddOnFlds@@KGPAUCRuntimeClass@@XZ
?classTSaleDocDetailAddOnFlds@TSaleDocDetailAddOnFlds@@2UCRuntimeClass@@B
_TaskBuilderAddOn_@0

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08327d5d30bca9b4dc170033edf6431a

Headers

DLL Characteristics

File Characteristics

Imports

tbgeneric

tboledb

tbgenlib

salesdbl

mfc100u

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB