NEAS[.]246d899f2616e7052d106e188f77f490[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.246d899f2616e7052d106e188f77f490.exe
Size

258KB
MD5

246d899f2616e7052d106e188f77f490
SHA1

8a1af1138bad56b11620fedd426a6e50e406f6aa
SHA256

eeb95f9bd61b94dfa755ee029a293eccfbc069e5e7c6c8721b78e940b5ae8024
SHA512

55d3a8cd71afadecf4a54999f6683f23bd0e46c353bc08e465e51375f73e5eb03760d63b1a32564a6a7606836cb5a4f3ca3ec9339f983f6c10276de2a8569a72
SSDEEP

6144:mI5vO7CyVYTmI7uEBbzRclSLjZ5Ub9IL:mI5fGuFxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.246d899f2616e7052d106e188f77f490.exe

Files

NEAS.246d899f2616e7052d106e188f77f490.exe
.dll windows:4 windows x64

c612fafffc7fb64655ccf6312281e13a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
atoi
calloc
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memset
realloc
strchr
strcmp
strcspn
strlen
strncmp
strpbrk
strrchr
strspn
strtol
strtoul
tolower
ungetc
vfprintf

libgio-2.0-0

g_file_new_for_path
g_file_replace
g_inet_address_to_string
g_output_stream_get_type
g_output_stream_write_all
g_resolver_free_addresses
g_resolver_get_default
g_resolver_lookup_by_name

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_ascii_strdown
g_ascii_string_to_unsigned
g_ascii_strncasecmp
g_ascii_table
g_assertion_message_expr
g_build_path
g_clear_error
g_date_time_add
g_date_time_difference
g_date_time_new_from_unix_utc
g_date_time_unref
g_error_free
g_free
g_intern_static_string
g_list_append
g_list_delete_link
g_list_first
g_list_foreach
g_list_free
g_list_free_full
g_list_index
g_list_insert_before
g_list_length
g_list_nth_data
g_list_position
g_log
g_malloc
g_malloc0
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_ptr_array_add
g_ptr_array_new
g_ptr_array_set_free_func
g_ptr_array_set_size
g_ptr_array_unref
g_queue_clear
g_queue_foreach
g_queue_init
g_queue_peek_head_link
g_queue_push_tail
g_random_int_range
g_return_if_fail_warning
g_slice_alloc
g_slice_free1
g_str_has_prefix
g_strchomp
g_strchug
g_strcmp0
g_strconcat
g_strdup
g_strdup_printf
g_strfreev
g_strjoin
g_strjoinv
g_strndup
g_strsplit
g_strsplit_set
g_strstr_len
g_strv_length

libgobject-2.0-0

g_enum_register_static
g_object_class_install_property
g_object_get
g_object_new
g_object_ref
g_object_set
g_object_set_valist
g_object_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_enum
g_param_spec_float
g_param_spec_int
g_param_spec_string
g_param_spec_uint
g_param_spec_uint64
g_signal_connect_data
g_signal_emit
g_signal_new_class_handler
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static_simple
g_value_dup_boxed
g_value_dup_string
g_value_get_boolean
g_value_get_double
g_value_get_enum
g_value_get_float
g_value_get_int
g_value_get_pointer
g_value_get_uint
g_value_get_uint64
g_value_set_boolean
g_value_set_boxed
g_value_set_double
g_value_set_enum
g_value_set_float
g_value_set_int
g_value_set_pointer
g_value_set_static_string
g_value_set_string
g_value_set_uint
g_value_set_uint64

libgstbase-1.0-0

gst_adapter_available
gst_adapter_clear
gst_adapter_map
gst_adapter_new
gst_adapter_push
gst_adapter_take_buffer
gst_adapter_unmap
gst_byte_reader_get_sub_reader
gst_byte_reader_set_pos

libgstnet-1.0-0

gst_ntp_clock_new

libgstreamer-1.0-0

GST_CAT_DEFAULT
_gst_caps_none
_gst_date_time_type
_gst_debug_category_new
_gst_debug_min
_gst_debug_register_funcptr
_gst_element_error_printf
_gst_fraction_type
gst_bin_add
gst_bin_get_type
gst_buffer_copy_region
gst_buffer_get_size
gst_buffer_map
gst_buffer_new_memdup
gst_buffer_new_wrapped
gst_buffer_resize
gst_buffer_unmap
gst_caps_from_string
gst_caps_get_structure
gst_caps_set_simple
gst_caps_to_string
gst_clock_get_time
gst_clock_wait_for_sync
gst_date_time_new
gst_date_time_new_from_g_date_time
gst_date_time_new_from_iso8601_string
gst_date_time_new_now_utc
gst_date_time_ref
gst_date_time_to_g_date_time
gst_date_time_to_iso8601_string
gst_date_time_unref
gst_debug_log
gst_element_add_pad
gst_element_class_add_static_pad_template
gst_element_class_set_static_metadata
gst_element_factory_make
gst_element_get_base_time
gst_element_get_clock
gst_element_message_full
gst_element_register
gst_element_release_request_pad
gst_element_remove_pad
gst_element_request_pad_simple
gst_event_new_protection
gst_event_parse_seek
gst_flow_get_name
gst_ghost_pad_new_from_template
gst_message_get_structure
gst_mini_object_unref
gst_object_get_type
gst_object_ref
gst_object_unref
gst_pad_add_probe
gst_pad_get_current_caps
gst_pad_get_peer
gst_pad_new_from_template
gst_pad_remove_probe
gst_pad_set_active
gst_param_spec_fraction
gst_plugin_register_static
gst_resource_error_quark
gst_segment_position_from_running_time
gst_segment_to_running_time
gst_static_pad_template_get
gst_stream_error_quark
gst_structure_get_clock_time
gst_structure_get_int
gst_structure_get_name
gst_structure_get_string
gst_structure_get_value
gst_structure_has_name
gst_tag_list_new
gst_type_mark_as_plugin_api
gst_uri_from_string
gst_uri_from_string_with_base
gst_uri_get_query_string
gst_uri_join_strings
gst_uri_make_writable
gst_uri_set_query_string
gst_uri_set_query_table
gst_uri_to_string
gst_util_array_binary_search
gst_util_fraction_compare
gst_util_uint64_scale
gst_util_uint64_scale_ceil
gst_value_get_fraction_denominator
gst_value_get_fraction_numerator
gst_value_get_structure
gst_value_set_fraction

libgsttag-1.0-0

gst_tag_check_language_code

libintl-8

DllMain

libxml2-2

xmlAddChild
xmlAllocOutputBuffer
xmlCheckVersion
xmlDocCopyNode
xmlDocDumpMemory
xmlDocGetRootElement
xmlDocSetRootElement
xmlFree
xmlFreeDoc
xmlFreeNode
xmlGetNsProp
xmlGetProp
xmlMemStrdup
xmlNewDoc
xmlNewNode
xmlNodeDumpOutput
xmlNodeGetContent
xmlNodeSetContent
xmlOutputBufferClose
xmlOutputBufferFlush
xmlOutputBufferGetContent
xmlOutputBufferGetSize
xmlReadMemory
xmlSetProp
xmlStrcmp
xmlStrlen
xmlStrndup

libgstadaptivedemux-1.0-0

gst_adaptive_demux_get_client_now_utc
gst_adaptive_demux_get_monotonic_time
gst_adaptive_demux_get_qos_earliest_time
gst_adaptive_demux_get_type
gst_adaptive_demux_set_stream_struct_size
gst_adaptive_demux_stream_advance_fragment
gst_adaptive_demux_stream_fragment_clear
gst_adaptive_demux_stream_new
gst_adaptive_demux_stream_push_buffer
gst_adaptive_demux_stream_queue_event
gst_adaptive_demux_stream_set_caps
gst_adaptive_demux_stream_set_tags

libgstisoff-1.0-0

gst_isoff_moof_box_free
gst_isoff_moof_box_parse
gst_isoff_parse_box_header
gst_isoff_sidx_parser_clear
gst_isoff_sidx_parser_init
gst_isoff_sidx_parser_parse

libgsturidownloader-1.0-0

gst_fragment_get_buffer
gst_uri_downloader_fetch_uri
gst_uri_downloader_fetch_uri_with_range

Exports

Exports

gst_dash_demux_debug
gst_dash_demux_get_type
gst_dash_sink_get_type
gst_element_register_dashdemux
gst_element_register_dashsink
gst_mpd_adaptation_set_node_free
gst_mpd_adaptation_set_node_get_type
gst_mpd_adaptation_set_node_new
gst_mpd_baseurl_node_free
gst_mpd_baseurl_node_get_type
gst_mpd_baseurl_node_new
gst_mpd_client_active_stream_contains_subtitles
gst_mpd_client_active_streams_free
gst_mpd_client_add_baseurl_node
gst_mpd_client_add_segment_url
gst_mpd_client_add_time_difference
gst_mpd_client_advance_segment
gst_mpd_client_calculate_time_difference
gst_mpd_client_check_profiles
gst_mpd_client_fetch_on_load_external_resources
gst_mpd_client_free
gst_mpd_client_get_active_stream_by_index
gst_mpd_client_get_adaptation_sets
gst_mpd_client_get_audio_stream_num_channels
gst_mpd_client_get_audio_stream_rate
gst_mpd_client_get_availability_start_time
gst_mpd_client_get_baseURL
gst_mpd_client_get_bitstream_switching_flag
gst_mpd_client_get_last_fragment_timestamp_end
gst_mpd_client_get_list_and_nb_of_audio_language
gst_mpd_client_get_maximum_segment_duration
gst_mpd_client_get_media_presentation_duration
gst_mpd_client_get_nb_active_stream
gst_mpd_client_get_nb_adaptationSet
gst_mpd_client_get_next_fragment
gst_mpd_client_get_next_fragment_duration
gst_mpd_client_get_next_fragment_timestamp
gst_mpd_client_get_next_header
gst_mpd_client_get_next_header_index
gst_mpd_client_get_next_segment_availability_start_time
gst_mpd_client_get_period_id
gst_mpd_client_get_period_index
gst_mpd_client_get_period_index_at_time
gst_mpd_client_get_period_start_time
gst_mpd_client_get_rep_idx_with_max_bandwidth
gst_mpd_client_get_rep_idx_with_min_bandwidth
gst_mpd_client_get_stream_caps
gst_mpd_client_get_stream_presentation_offset
gst_mpd_client_get_type
gst_mpd_client_get_utc_timing_sources
gst_mpd_client_get_video_stream_framerate
gst_mpd_client_get_video_stream_height
gst_mpd_client_get_video_stream_width
gst_mpd_client_get_xml_content
gst_mpd_client_has_isoff_ondemand_profile
gst_mpd_client_has_next_period
gst_mpd_client_has_next_segment
gst_mpd_client_has_previous_period
gst_mpd_client_is_live
gst_mpd_client_new
gst_mpd_client_new_static
gst_mpd_client_parse
gst_mpd_client_parse_baseURL
gst_mpd_client_parse_default_presentation_delay
gst_mpd_client_seek_to_first_segment
gst_mpd_client_seek_to_time
gst_mpd_client_set_adaptation_set_node
gst_mpd_client_set_period_id
gst_mpd_client_set_period_index
gst_mpd_client_set_period_node
gst_mpd_client_set_representation_node
gst_mpd_client_set_root_node
gst_mpd_client_set_segment_list
gst_mpd_client_set_segment_template
gst_mpd_client_set_uri_downloader
gst_mpd_client_setup_media_presentation
gst_mpd_client_setup_representation
gst_mpd_client_setup_streaming
gst_mpd_client_stream_seek
gst_mpd_content_component_node_free
gst_mpd_content_component_node_get_type
gst_mpd_content_component_node_new
gst_mpd_descriptor_type_node_free
gst_mpd_descriptor_type_node_get_type
gst_mpd_descriptor_type_node_new
gst_mpd_helper_combine_urls
gst_mpd_helper_get_SAP_type
gst_mpd_helper_get_audio_codec_from_mime
gst_mpd_helper_get_mpd_type
gst_mpd_helper_get_video_codec_from_mime
gst_mpd_helper_mimetype_to_caps
gst_mpd_helper_strncmp_ext
gst_mpd_location_node_free
gst_mpd_location_node_get_type
gst_mpd_location_node_new
gst_mpd_metrics_node_free
gst_mpd_metrics_node_get_type
gst_mpd_metrics_node_new
gst_mpd_metrics_range_node_free
gst_mpd_metrics_range_node_get_type
gst_mpd_metrics_range_node_new
gst_mpd_mult_segment_base_node_add_child_node
gst_mpd_mult_segment_base_node_get_type
gst_mpd_node_add_child_node
gst_mpd_node_get_list_item
gst_mpd_node_get_type
gst_mpd_node_get_xml_buffer
gst_mpd_node_get_xml_pointer
gst_mpd_period_node_free
gst_mpd_period_node_get_type
gst_mpd_period_node_new
gst_mpd_program_information_node_free
gst_mpd_program_information_node_get_type
gst_mpd_program_information_node_new
gst_mpd_reporting_node_free
gst_mpd_reporting_node_get_type
gst_mpd_reporting_node_new
gst_mpd_representation_base_node_get_list_item
gst_mpd_representation_base_node_get_type
gst_mpd_representation_node_free
gst_mpd_representation_node_get_type
gst_mpd_representation_node_new
gst_mpd_root_node_free
gst_mpd_root_node_get_type
gst_mpd_root_node_new
gst_mpd_s_node_clone
gst_mpd_s_node_free
gst_mpd_s_node_get_type
gst_mpd_s_node_new
gst_mpd_segment_base_node_free
gst_mpd_segment_base_node_get_type
gst_mpd_segment_base_node_new
gst_mpd_segment_list_node_add_segment
gst_mpd_segment_list_node_free
gst_mpd_segment_list_node_get_type
gst_mpd_segment_list_node_new
gst_mpd_segment_template_node_free
gst_mpd_segment_template_node_get_type
gst_mpd_segment_template_node_new
gst_mpd_segment_timeline_node_clone
gst_mpd_segment_timeline_node_free
gst_mpd_segment_timeline_node_get_type
gst_mpd_segment_timeline_node_new
gst_mpd_segment_url_node_clone
gst_mpd_segment_url_node_free
gst_mpd_segment_url_node_get_type
gst_mpd_segment_url_node_new
gst_mpd_sub_representation_node_free
gst_mpd_sub_representation_node_get_type
gst_mpd_sub_representation_node_new
gst_mpd_subset_node_free
gst_mpd_subset_node_get_type
gst_mpd_subset_node_new
gst_mpd_url_type_node_clone
gst_mpd_url_type_node_free
gst_mpd_url_type_node_get_type
gst_mpd_url_type_node_new
gst_mpd_utctiming_get_method
gst_mpd_utctiming_get_scheme_id_uri
gst_mpd_utctiming_node_free
gst_mpd_utctiming_node_get_type
gst_mpd_utctiming_node_new
gst_mpdparser_build_URL_from_template
gst_mpdparser_free_active_stream
gst_mpdparser_free_media_segment
gst_mpdparser_free_stream_period
gst_mpdparser_get_external_adaptation_sets
gst_mpdparser_get_external_periods
gst_mpdparser_get_external_segment_list
gst_mpdparser_get_initializationURL
gst_mpdparser_get_mediaURL
gst_mpdparser_get_mpd_root_node
gst_mpdparser_init_active_stream_segments
gst_mpdparser_media_fragment_info_clear
gst_mpdparser_representation_get_mimetype
gst_plugin_dash_get_desc
gst_plugin_dash_register
gst_xml_helper_clone_frame_rate
gst_xml_helper_clone_range
gst_xml_helper_clone_ratio
gst_xml_helper_get_node_as_string
gst_xml_helper_get_node_content
gst_xml_helper_get_node_namespace
gst_xml_helper_get_ns_prop_string
gst_xml_helper_get_prop_boolean
gst_xml_helper_get_prop_cond_uint
gst_xml_helper_get_prop_dateTime
gst_xml_helper_get_prop_double
gst_xml_helper_get_prop_duration
gst_xml_helper_get_prop_framerate
gst_xml_helper_get_prop_range
gst_xml_helper_get_prop_ratio
gst_xml_helper_get_prop_signed_integer
gst_xml_helper_get_prop_string
gst_xml_helper_get_prop_string_no_whitespace
gst_xml_helper_get_prop_string_stripped
gst_xml_helper_get_prop_string_vector_type
gst_xml_helper_get_prop_uint_vector_type
gst_xml_helper_get_prop_unsigned_integer
gst_xml_helper_get_prop_unsigned_integer_64
gst_xml_helper_get_prop_validated_string
gst_xml_helper_set_content
gst_xml_helper_set_prop_boolean
gst_xml_helper_set_prop_cond_uint
gst_xml_helper_set_prop_date_time
gst_xml_helper_set_prop_double
gst_xml_helper_set_prop_duration
gst_xml_helper_set_prop_framerate
gst_xml_helper_set_prop_int
gst_xml_helper_set_prop_int64
gst_xml_helper_set_prop_range
gst_xml_helper_set_prop_ratio
gst_xml_helper_set_prop_string
gst_xml_helper_set_prop_uint
gst_xml_helper_set_prop_uint64
gst_xml_helper_set_prop_uint_vector_type

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c612fafffc7fb64655ccf6312281e13a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgstbase-1.0-0

libgstnet-1.0-0

libgstreamer-1.0-0

libgsttag-1.0-0

libintl-8

libxml2-2

libgstadaptivedemux-1.0-0

libgstisoff-1.0-0

libgsturidownloader-1.0-0

Exports

Exports

Sections

.text Size: 182KB - Virtual size: 181KB

.data Size: 1024B - Virtual size: 656B

.rdata Size: 37KB - Virtual size: 36KB

.pdata Size: 6KB - Virtual size: 6KB

.xdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 3KB

.edata Size: 9KB - Virtual size: 9KB

.idata Size: 14KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 320B

.text
Size: 182KB - Virtual size: 181KB

.data
Size: 1024B - Virtual size: 656B

.rdata
Size: 37KB - Virtual size: 36KB

.pdata
Size: 6KB - Virtual size: 6KB

.xdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 3KB

.edata
Size: 9KB - Virtual size: 9KB

.idata
Size: 14KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 320B