NEAS[.]404f1b13c36c5be50398636da235ed10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.404f1b13c36c5be50398636da235ed10.exe
Size

163KB
MD5

404f1b13c36c5be50398636da235ed10
SHA1

aacbcd9165ddc650a1e95e1820e767924f4e1cdc
SHA256

df27127ce562a18c1f13c0a342a4b0307bb5afc50ec469e800fd49b017ff90a9
SHA512

15552730bcd94b2eb911a0633c97811976a9280cfa1c6448c9bde970751c2e972d84adcbe634502063dc6fd5241516ffead88d212b64eb4dc6eb854421247d36
SSDEEP

3072:XwZTmxTxvyjLJEcGE0hR0DFtj1IinQyUW:XMmDvyRjwIFciHUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.404f1b13c36c5be50398636da235ed10.exe

Files

NEAS.404f1b13c36c5be50398636da235ed10.exe
.dll windows:4 windows x64

76595bf98a2bb823a5207ac0e2e2e160

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
memmove
memset
realloc
strcmp
strlen
strncmp
strstr
vfprintf

libglib-2.0-0

g_ascii_dtostr
g_ascii_strcasecmp
g_ascii_strtoull
g_bytes_get_data
g_bytes_get_size
g_bytes_new
g_free
g_intern_static_string
g_list_free_full
g_log
g_malloc0
g_memdup2
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_ptr_array_add
g_ptr_array_foreach
g_ptr_array_new
g_ptr_array_new_with_free_func
g_ptr_array_remove_fast
g_ptr_array_set_size
g_ptr_array_unref
g_quark_from_static_string
g_quark_to_string
g_random_int
g_random_int_range
g_return_if_fail_warning
g_str_has_prefix
g_strcmp0
g_strdup
g_strdup_printf
g_strndup
g_strv_length

libgobject-2.0-0

g_enum_register_static
g_flags_register_static
g_object_class_install_property
g_object_notify
g_object_ref
g_object_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_int
g_param_spec_int64
g_param_spec_uint
g_signal_emit
g_signal_new_class_handler
g_type_add_instance_private
g_type_check_instance_is_a
g_type_check_value_holds
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static
g_type_register_static_simple
g_value_get_boolean
g_value_get_double
g_value_get_int
g_value_get_int64
g_value_get_object
g_value_get_string
g_value_get_uint
g_value_get_uint64
g_value_init
g_value_set_boolean
g_value_set_int
g_value_set_int64
g_value_set_object
g_value_set_string
g_value_set_uint
g_value_take_boxed
g_value_unset

libgstbase-1.0-0

gst_adapter_available
gst_adapter_available_fast
gst_adapter_clear
gst_adapter_new
gst_adapter_prev_pts
gst_adapter_push
gst_adapter_take_buffer
gst_adapter_take_buffer_fast

libgstreamer-1.0-0

GST_CAT_DEFAULT
_gst_buffer_type
_gst_caps_type
_gst_debug_category_new
_gst_debug_dump_mem
_gst_debug_min
_gst_debug_register_funcptr
_gst_element_error_printf
_gst_meta_transform_copy
_gst_structure_type
_gst_value_array_type
gst_allocator_alloc
gst_buffer_add_meta
gst_buffer_append
gst_buffer_append_memory
gst_buffer_copy_into
gst_buffer_copy_region
gst_buffer_find_memory
gst_buffer_foreach_meta
gst_buffer_get_meta
gst_buffer_get_size
gst_buffer_insert_memory
gst_buffer_list_foreach
gst_buffer_list_get
gst_buffer_list_get_writable
gst_buffer_list_insert
gst_buffer_list_length
gst_buffer_list_new
gst_buffer_map
gst_buffer_map_range
gst_buffer_n_memory
gst_buffer_new
gst_buffer_new_wrapped
gst_buffer_new_wrapped_full
gst_buffer_remove_all_memory
gst_buffer_remove_memory
gst_buffer_remove_memory_range
gst_buffer_replace_memory
gst_buffer_resize
gst_buffer_set_size
gst_buffer_unmap
gst_caps_get_structure
gst_caps_intersect
gst_caps_intersect_full
gst_caps_is_empty
gst_caps_is_equal
gst_caps_is_fixed
gst_caps_new_empty_simple
gst_caps_new_simple
gst_caps_set_simple
gst_caps_set_value
gst_caps_truncate
gst_core_error_quark
gst_debug_log
gst_element_add_pad
gst_element_class_add_metadata
gst_element_class_get_metadata
gst_element_class_get_pad_template
gst_element_factory_create
gst_element_factory_get_metadata
gst_element_factory_get_type
gst_element_get_type
gst_element_message_full
gst_event_copy_segment
gst_event_get_seqnum
gst_event_get_structure
gst_event_has_name
gst_event_new_caps
gst_event_new_gap
gst_event_new_segment
gst_event_parse_caps
gst_event_set_gap_flags
gst_event_set_seqnum
gst_memory_copy
gst_memory_map
gst_memory_resize
gst_memory_unmap
gst_meta_api_type_get_tags
gst_meta_api_type_has_tag
gst_meta_api_type_register
gst_meta_register
gst_mini_object_copy
gst_mini_object_is_writable
gst_mini_object_make_writable
gst_mini_object_ref
gst_mini_object_replace
gst_mini_object_unref
gst_object_ref
gst_object_ref_sink
gst_object_unref
gst_pad_check_reconfigure
gst_pad_event_default
gst_pad_get_current_caps
gst_pad_get_pad_template_caps
gst_pad_get_sticky_event
gst_pad_get_type
gst_pad_has_current_caps
gst_pad_mark_reconfigure
gst_pad_new_from_template
gst_pad_peer_query_caps
gst_pad_push
gst_pad_push_event
gst_pad_push_list
gst_pad_query_default
gst_pad_send_event
gst_pad_set_chain_function_full
gst_pad_set_chain_list_function_full
gst_pad_set_event_function_full
gst_pad_set_query_function_full
gst_pad_use_fixed_caps
gst_plugin_feature_get_rank
gst_query_parse_caps
gst_query_set_caps_result
gst_registry_feature_filter
gst_registry_get
gst_segment_init
gst_segment_to_running_time
gst_segment_to_stream_time
gst_stream_error_quark
gst_structure_fixate_field_nearest_int
gst_structure_foreach
gst_structure_free
gst_structure_get_boolean
gst_structure_get_clock_time
gst_structure_get_fraction
gst_structure_get_int
gst_structure_get_name
gst_structure_get_uint
gst_structure_get_value
gst_structure_has_field
gst_structure_has_field_typed
gst_structure_has_name
gst_structure_id_set_value
gst_structure_n_fields
gst_structure_new
gst_structure_new_empty
gst_structure_nth_field_name
gst_structure_set
gst_structure_set_valist
gst_structure_set_value
gst_util_fraction_to_double
gst_util_uint64_scale
gst_util_uint64_scale_int
gst_value_array_append_value
gst_value_array_get_size
gst_value_array_get_value
gst_value_is_fixed

libintl-8

DllMain

Exports

Exports

gst_buffer_add_rtp_source_meta
gst_buffer_get_rtp_source_meta
gst_rtcp_buffer_add_packet
gst_rtcp_buffer_get_first_packet
gst_rtcp_buffer_get_packet_count
gst_rtcp_buffer_map
gst_rtcp_buffer_new
gst_rtcp_buffer_new_copy_data
gst_rtcp_buffer_new_take_data
gst_rtcp_buffer_unmap
gst_rtcp_buffer_validate
gst_rtcp_buffer_validate_data
gst_rtcp_buffer_validate_data_reduced
gst_rtcp_buffer_validate_reduced
gst_rtcp_ntp_to_unix
gst_rtcp_packet_add_profile_specific_ext
gst_rtcp_packet_add_rb
gst_rtcp_packet_app_get_data
gst_rtcp_packet_app_get_data_length
gst_rtcp_packet_app_get_name
gst_rtcp_packet_app_get_ssrc
gst_rtcp_packet_app_get_subtype
gst_rtcp_packet_app_set_data_length
gst_rtcp_packet_app_set_name
gst_rtcp_packet_app_set_ssrc
gst_rtcp_packet_app_set_subtype
gst_rtcp_packet_bye_add_ssrc
gst_rtcp_packet_bye_add_ssrcs
gst_rtcp_packet_bye_get_nth_ssrc
gst_rtcp_packet_bye_get_reason
gst_rtcp_packet_bye_get_reason_len
gst_rtcp_packet_bye_get_ssrc_count
gst_rtcp_packet_bye_set_reason
gst_rtcp_packet_copy_profile_specific_ext
gst_rtcp_packet_fb_get_fci
gst_rtcp_packet_fb_get_fci_length
gst_rtcp_packet_fb_get_media_ssrc
gst_rtcp_packet_fb_get_sender_ssrc
gst_rtcp_packet_fb_get_type
gst_rtcp_packet_fb_set_fci_length
gst_rtcp_packet_fb_set_media_ssrc
gst_rtcp_packet_fb_set_sender_ssrc
gst_rtcp_packet_fb_set_type
gst_rtcp_packet_get_count
gst_rtcp_packet_get_length
gst_rtcp_packet_get_padding
gst_rtcp_packet_get_profile_specific_ext
gst_rtcp_packet_get_profile_specific_ext_length
gst_rtcp_packet_get_rb
gst_rtcp_packet_get_rb_count
gst_rtcp_packet_get_type
gst_rtcp_packet_move_to_next
gst_rtcp_packet_remove
gst_rtcp_packet_rr_get_ssrc
gst_rtcp_packet_rr_set_ssrc
gst_rtcp_packet_sdes_add_entry
gst_rtcp_packet_sdes_add_item
gst_rtcp_packet_sdes_copy_entry
gst_rtcp_packet_sdes_first_entry
gst_rtcp_packet_sdes_first_item
gst_rtcp_packet_sdes_get_entry
gst_rtcp_packet_sdes_get_item_count
gst_rtcp_packet_sdes_get_ssrc
gst_rtcp_packet_sdes_next_entry
gst_rtcp_packet_sdes_next_item
gst_rtcp_packet_set_rb
gst_rtcp_packet_sr_get_sender_info
gst_rtcp_packet_sr_set_sender_info
gst_rtcp_packet_xr_first_rb
gst_rtcp_packet_xr_get_block_length
gst_rtcp_packet_xr_get_block_type
gst_rtcp_packet_xr_get_dlrr_block
gst_rtcp_packet_xr_get_prt_by_seq
gst_rtcp_packet_xr_get_prt_info
gst_rtcp_packet_xr_get_rle_info
gst_rtcp_packet_xr_get_rle_nth_chunk
gst_rtcp_packet_xr_get_rrt
gst_rtcp_packet_xr_get_ssrc
gst_rtcp_packet_xr_get_summary_info
gst_rtcp_packet_xr_get_summary_jitter
gst_rtcp_packet_xr_get_summary_pkt
gst_rtcp_packet_xr_get_summary_ttl
gst_rtcp_packet_xr_get_voip_burst_metrics
gst_rtcp_packet_xr_get_voip_configuration_params
gst_rtcp_packet_xr_get_voip_delay_metrics
gst_rtcp_packet_xr_get_voip_jitter_buffer_params
gst_rtcp_packet_xr_get_voip_metrics_ssrc
gst_rtcp_packet_xr_get_voip_packet_metrics
gst_rtcp_packet_xr_get_voip_quality_metrics
gst_rtcp_packet_xr_get_voip_signal_metrics
gst_rtcp_packet_xr_next_rb
gst_rtcp_sdes_name_to_type
gst_rtcp_sdes_type_to_name
gst_rtcp_type_get_type
gst_rtcp_unix_to_ntp
gst_rtcpfb_type_get_type
gst_rtcpsdes_type_get_type
gst_rtcpxr_type_get_type
gst_rtp_base_audio_payload_flush
gst_rtp_base_audio_payload_get_adapter
gst_rtp_base_audio_payload_get_type
gst_rtp_base_audio_payload_push
gst_rtp_base_audio_payload_set_frame_based
gst_rtp_base_audio_payload_set_frame_options
gst_rtp_base_audio_payload_set_sample_based
gst_rtp_base_audio_payload_set_sample_options
gst_rtp_base_audio_payload_set_samplebits_options
gst_rtp_base_depayload_get_type
gst_rtp_base_depayload_is_source_info_enabled
gst_rtp_base_depayload_push
gst_rtp_base_depayload_push_list
gst_rtp_base_depayload_set_source_info_enabled
gst_rtp_base_payload_allocate_output_buffer
gst_rtp_base_payload_get_source_count
gst_rtp_base_payload_get_type
gst_rtp_base_payload_is_filled
gst_rtp_base_payload_is_source_info_enabled
gst_rtp_base_payload_push
gst_rtp_base_payload_push_list
gst_rtp_base_payload_set_options
gst_rtp_base_payload_set_outcaps
gst_rtp_base_payload_set_outcaps_structure
gst_rtp_base_payload_set_source_info_enabled
gst_rtp_buffer_add_extension_onebyte_header
gst_rtp_buffer_add_extension_twobytes_header
gst_rtp_buffer_allocate_data
gst_rtp_buffer_calc_header_len
gst_rtp_buffer_calc_packet_len
gst_rtp_buffer_calc_payload_len
gst_rtp_buffer_compare_seqnum
gst_rtp_buffer_default_clock_rate
gst_rtp_buffer_ext_timestamp
gst_rtp_buffer_flags_get_type
gst_rtp_buffer_get_csrc
gst_rtp_buffer_get_csrc_count
gst_rtp_buffer_get_extension
gst_rtp_buffer_get_extension_bytes
gst_rtp_buffer_get_extension_data
gst_rtp_buffer_get_extension_onebyte_header
gst_rtp_buffer_get_extension_onebyte_header_from_bytes
gst_rtp_buffer_get_extension_twobytes_header
gst_rtp_buffer_get_header_len
gst_rtp_buffer_get_marker
gst_rtp_buffer_get_packet_len
gst_rtp_buffer_get_padding
gst_rtp_buffer_get_payload
gst_rtp_buffer_get_payload_buffer
gst_rtp_buffer_get_payload_bytes
gst_rtp_buffer_get_payload_len
gst_rtp_buffer_get_payload_subbuffer
gst_rtp_buffer_get_payload_type
gst_rtp_buffer_get_seq
gst_rtp_buffer_get_ssrc
gst_rtp_buffer_get_timestamp
gst_rtp_buffer_get_version
gst_rtp_buffer_map
gst_rtp_buffer_map_flags_get_type
gst_rtp_buffer_new_allocate
gst_rtp_buffer_new_allocate_len
gst_rtp_buffer_new_copy_data
gst_rtp_buffer_new_take_data
gst_rtp_buffer_pad_to
gst_rtp_buffer_remove_extension_data
gst_rtp_buffer_set_csrc
gst_rtp_buffer_set_extension
gst_rtp_buffer_set_extension_data
gst_rtp_buffer_set_marker
gst_rtp_buffer_set_packet_len
gst_rtp_buffer_set_padding
gst_rtp_buffer_set_payload_type
gst_rtp_buffer_set_seq
gst_rtp_buffer_set_ssrc
gst_rtp_buffer_set_timestamp
gst_rtp_buffer_set_version
gst_rtp_buffer_unmap
gst_rtp_get_header_extension_list
gst_rtp_hdrext_get_ntp_56
gst_rtp_hdrext_get_ntp_64
gst_rtp_hdrext_set_ntp_56
gst_rtp_hdrext_set_ntp_64
gst_rtp_header_extension_class_set_uri
gst_rtp_header_extension_create_from_uri
gst_rtp_header_extension_direction_get_type
gst_rtp_header_extension_flags_get_type
gst_rtp_header_extension_get_direction
gst_rtp_header_extension_get_id
gst_rtp_header_extension_get_max_size
gst_rtp_header_extension_get_sdp_caps_field_name
gst_rtp_header_extension_get_supported_flags
gst_rtp_header_extension_get_type
gst_rtp_header_extension_get_uri
gst_rtp_header_extension_read
gst_rtp_header_extension_set_attributes_from_caps
gst_rtp_header_extension_set_caps_from_attributes
gst_rtp_header_extension_set_caps_from_attributes_helper
gst_rtp_header_extension_set_direction
gst_rtp_header_extension_set_id
gst_rtp_header_extension_set_non_rtp_sink_caps
gst_rtp_header_extension_set_wants_update_non_rtp_src_caps
gst_rtp_header_extension_update_non_rtp_src_caps
gst_rtp_header_extension_wants_update_non_rtp_src_caps
gst_rtp_header_extension_write
gst_rtp_payload_get_type
gst_rtp_payload_info_for_name
gst_rtp_payload_info_for_pt
gst_rtp_profile_get_type
gst_rtp_source_meta_api_get_type
gst_rtp_source_meta_append_csrc
gst_rtp_source_meta_get_info
gst_rtp_source_meta_get_source_count
gst_rtp_source_meta_set_ssrc

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 592B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76595bf98a2bb823a5207ac0e2e2e160

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libglib-2.0-0

libgobject-2.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

libintl-8

Exports

Exports

Sections

.text Size: 93KB - Virtual size: 93KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 38KB - Virtual size: 37KB

.pdata Size: 4KB - Virtual size: 3KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 592B

.edata Size: 9KB - Virtual size: 8KB

.idata Size: 11KB - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 93KB - Virtual size: 93KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 38KB - Virtual size: 37KB

.pdata
Size: 4KB - Virtual size: 3KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 592B

.edata
Size: 9KB - Virtual size: 8KB

.idata
Size: 11KB - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 1024B