NEAS[.]616fa7a89c98647b032657f91ba93440_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.616fa7a89c98647b032657f91ba93440_JC.exe
Size

115KB
MD5

616fa7a89c98647b032657f91ba93440
SHA1

71a1418ffe0cfc374ce82cb05c7fd6d6c149b9af
SHA256

03909013083c037468f91e2032bd4b41b91d07b75e790d7e574d6f7628a0ae1d
SHA512

8bc12f5115b43af39cbac14d498e53601eef15a406417993cb7dc7dfa53dfdb5b49a9f4b330219b1780ad4c7f0a5c880dd8054135f3ddf5d79b7e76017e1f43e
SSDEEP

3072:M6tjDL7FfK/eEvR92WDXQWbEPalP++f6//CMMMMVMMMYdPf8u78v:M6G/Xv/zDbflK//Yx7gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.616fa7a89c98647b032657f91ba93440_JC.exe

Files

NEAS.616fa7a89c98647b032657f91ba93440_JC.exe
.dll windows:6 windows x86

95e777f498635454dd2519653c133955

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-math-l1-1-0

_CIatan2
_libm_sse2_atan_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
modf
_libm_sse2_pow_precise

api-ms-win-crt-heap-l1-1-0

calloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_cexit
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

get_twolame_url
get_twolame_version
twolame_close
twolame_encode_buffer
twolame_encode_buffer_float32
twolame_encode_buffer_float32_interleaved
twolame_encode_buffer_interleaved
twolame_encode_flush
twolame_get_ATH_level
twolame_get_DAB
twolame_get_DAB_crc_length
twolame_get_DAB_xpad_length
twolame_get_VBR
twolame_get_VBR_level
twolame_get_VBR_max_bitrate_kbps
twolame_get_VBR_q
twolame_get_bitrate
twolame_get_brate
twolame_get_copyright
twolame_get_emphasis
twolame_get_energy_levels
twolame_get_error_protection
twolame_get_extension
twolame_get_framelength
twolame_get_in_samplerate
twolame_get_mode
twolame_get_mode_name
twolame_get_num_ancillary_bits
twolame_get_num_channels
twolame_get_original
twolame_get_out_samplerate
twolame_get_padding
twolame_get_psymodel
twolame_get_quick_count
twolame_get_quick_mode
twolame_get_scale
twolame_get_scale_left
twolame_get_scale_right
twolame_get_verbosity
twolame_get_version
twolame_get_version_name
twolame_init
twolame_init_params
twolame_print_config
twolame_set_ATH_level
twolame_set_DAB
twolame_set_DAB_crc_length
twolame_set_DAB_scf_crc
twolame_set_DAB_scf_crc_length
twolame_set_DAB_xpad_length
twolame_set_VBR
twolame_set_VBR_level
twolame_set_VBR_max_bitrate_kbps
twolame_set_VBR_q
twolame_set_bitrate
twolame_set_brate
twolame_set_copyright
twolame_set_emphasis
twolame_set_energy_levels
twolame_set_error_protection
twolame_set_extension
twolame_set_freeformat
twolame_set_in_samplerate
twolame_set_mode
twolame_set_num_ancillary_bits
twolame_set_num_channels
twolame_set_original
twolame_set_out_samplerate
twolame_set_padding
twolame_set_psymodel
twolame_set_quick_count
twolame_set_quick_mode
twolame_set_scale
twolame_set_scale_left
twolame_set_scale_right
twolame_set_verbosity
twolame_set_version

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95e777f498635454dd2519653c133955

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 512B - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 512B - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB