NEAS[.]6cc510c8e727b6a16e53238bc7034d30[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6cc510c8e727b6a16e53238bc7034d30.exe
Size

62KB
MD5

6cc510c8e727b6a16e53238bc7034d30
SHA1

98d0461e3779089fa2ea767d9d83345bcaa51c15
SHA256

39cf7ec98a80e7960321d2b43b81349741a410132ae34c3039a5a5cbc2fbed5c
SHA512

1cb6c6ed2cc2ae1423f057fd8fb72581e5b86bf13efd4c48c46779e9eb53d61eb4ace28a38bad53fab0b0f1604226058ce30c77d784657e2c5a44d4210df6e70
SSDEEP

1536:qGKRezmfQZzDoWkilKIwyvGj2532RruOcZWdori:KfQNMXpuvGjOmccd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6cc510c8e727b6a16e53238bc7034d30.exe

Files

NEAS.6cc510c8e727b6a16e53238bc7034d30.exe
.dll windows:4 windows x64

1d3beab01a541ecf35c37253030f00da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strerror
strlen
strncmp
tan
vfprintf
wcslen

libglib-2.0-0

g_free
g_intern_static_string
g_log
g_malloc0
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_realloc
g_return_if_fail_warning

libgobject-2.0-0

g_enum_register_static
g_object_class_install_property
g_object_new
g_object_notify
g_object_ref
g_param_spec_double
g_param_spec_enum
g_param_spec_uint
g_type_add_interface_static
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static
g_type_register_static_simple
g_value_get_double
g_value_get_enum
g_value_get_uint
g_value_set_double
g_value_set_enum
g_value_set_uint

libgstaudio-1.0-0

gst_audio_filter_class_add_pad_templates
gst_audio_filter_get_type

libgstbase-1.0-0

gst_base_transform_set_passthrough

libgstreamer-1.0-0

_gst_debug_category_new
_gst_debug_min
gst_buffer_map
gst_buffer_unmap
gst_caps_from_string
gst_child_proxy_child_added
gst_child_proxy_child_removed
gst_child_proxy_get_property
gst_child_proxy_get_type
gst_child_proxy_set_property
gst_debug_log
gst_element_class_set_static_metadata
gst_element_register
gst_mini_object_unref
gst_object_get_parent
gst_object_get_type
gst_object_set_parent
gst_object_sync_values
gst_object_unparent
gst_object_unref
gst_plugin_register_static
gst_preset_get_type
gst_segment_to_stream_time
gst_type_mark_as_plugin_api

libintl-8

DllMain

Exports

Exports

equalizer_debug
equalizer_element_init
gst_element_register_equalizer_10bands
gst_element_register_equalizer_3bands
gst_element_register_equalizer_nbands
gst_iir_equalizer_10bands_get_type
gst_iir_equalizer_3bands_get_type
gst_iir_equalizer_compute_frequencies
gst_iir_equalizer_get_type
gst_iir_equalizer_nbands_get_type
gst_plugin_equalizer_get_desc
gst_plugin_equalizer_register

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d3beab01a541ecf35c37253030f00da

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libglib-2.0-0

libgobject-2.0-0

libgstaudio-1.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

libintl-8

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 7KB - Virtual size: 7KB

.pdata Size: 2KB - Virtual size: 1KB

.xdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 562B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 140B

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 7KB - Virtual size: 7KB

.pdata
Size: 2KB - Virtual size: 1KB

.xdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 562B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 140B