NEAS[.]8eafc60e8e02b09423ea4193302b5b80[.]exe

General

Target

NEAS.8eafc60e8e02b09423ea4193302b5b80.exe
Size

15KB
MD5

8eafc60e8e02b09423ea4193302b5b80
SHA1

53701cc7c2fbfa3e660d84938185cc182ee25965
SHA256

70e5512381905fd716477215f2b7eac1779014d4062507c2882c1a20aa4ae516
SHA512

59d81d0827b91b570e18a1975084891b85580c3912ea9be2e25451d43452fbb3abc0c75b8cbf20d0f8e592520f79573017b25b7f791c1c4cd5341d2bd9e6f7bd
SSDEEP

192:ZEtehOtiteMBX9SEFffknqvIW3ukPzBK9w1g1qglwE3X6PJMpWkvXLbWW:ZY8N9LFfmqt+0KK1g3lZKOgkvLqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8eafc60e8e02b09423ea4193302b5b80.exe

Files

NEAS.8eafc60e8e02b09423ea4193302b5b80.exe
.dll windows:5 windows x86

8d727d76ddb824e866d46f18002144c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp110

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z

mscoree

CLRCreateInstance

msvcr110

__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_calloc_crt
free
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
_unlock
_lock
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
_CxxThrowException
__CxxFrameHandler3
_amsg_exit
memcpy

kernel32

DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
EncodePointer

Exports

Exports

ImplantDotNetAssembly

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d727d76ddb824e866d46f18002144c7

Headers

DLL Characteristics

File Characteristics

Imports

msvcp110

mscoree

msvcr110

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB