NEAS[.]3282b6735090f731804695752c5d1200_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3282b6735090f731804695752c5d1200_JC.exe
Size

20KB
MD5

3282b6735090f731804695752c5d1200
SHA1

cefb41540fef6e6cad44c0da77bd346aa2019855
SHA256

28d1fc4e10ffe216a634e317d50bcffb1994076e2997aa439fa7d9bd37cc42b0
SHA512

7ccd4bf4ad71102ed27745ce9d283b7b082ee303b52587f80aee3b87fcf5db2c187cad172529be46828155cc12dcdbf36554d53422e71da4575d5f78c213f96d
SSDEEP

384:Yse/hLIknCxvcKLAbx5bXpKfVJdhjt9l4G8dYTvo68t9+eE:YPL7npNXpyVZl4LMS9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3282b6735090f731804695752c5d1200_JC.exe

Files

NEAS.3282b6735090f731804695752c5d1200_JC.exe
.dll windows:6 windows x86

c7b5b886a2ebabd07fee746296ba7f20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gstreamer-1.0-0

gst_element_class_add_static_pad_template
_gst_debug_category_new
gst_plugin_register_static
_gst_caps_type
gst_type_mark_as_plugin_api
gst_pad_query_caps
gst_registry_feature_filter
gst_registry_get
gst_value_set_caps
gst_value_get_caps
_gst_debug_register_funcptr
gst_ghost_pad_set_target
gst_ghost_pad_new_no_target
gst_library_error_quark
gst_bin_set_suppressed_flags
gst_bin_remove
gst_bin_add
gst_bin_get_type
gst_element_set_state
gst_element_post_message
gst_element_get_static_pad
gst_element_add_pad
gst_element_set_bus
gst_element_factory_create
gst_element_factory_get_metadata
gst_element_factory_get_type
gst_plugin_feature_rank_compare_func
gst_plugin_feature_list_free
gst_plugin_feature_get_rank
gst_bus_pop_filtered
gst_bus_new
gst_message_new_warning
gst_message_parse_error
gst_caps_can_intersect
gst_static_caps_get
gst_mini_object_copy
gst_mini_object_unref
gst_object_unref
_gst_debug_min
gst_util_set_object_arg
gst_debug_log
gst_resource_error_quark
gst_element_message_full
_gst_element_error_printf
gst_element_factory_make
gst_element_class_set_static_metadata
gst_element_register

gobject-2.0-0

g_object_set_property
g_param_spec_int64
g_value_set_int64
g_value_get_int64
g_type_check_instance_is_a
g_object_class_find_property
g_object_set
g_param_spec_boxed
g_value_set_boolean
g_value_get_boolean
g_type_class_adjust_private_offset
g_type_register_static_simple
g_type_class_peek_parent
g_type_name
g_param_spec_boolean
g_object_class_install_property

glib-2.0-0

g_log
g_strcmp0
g_strdup_printf
g_strdup
g_str_has_prefix
g_str_has_suffix
g_slist_foreach
g_slist_append
g_slist_free
g_list_sort
g_once_init_leave
g_once_init_enter
g_intern_static_string
g_free
g_error_free

vcruntime140

strstr
memmove
__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_cexit

kernel32

GetCurrentThreadId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

gst_plugin_autodetect_get_desc
gst_plugin_autodetect_register

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7b5b886a2ebabd07fee746296ba7f20

Headers

DLL Characteristics

File Characteristics

Imports

gstreamer-1.0-0

gobject-2.0-0

glib-2.0-0

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB