NEAS[.]10c4948db81f9d0f7bd7a5a72b6c4e80[.]exe

General

Target

NEAS.10c4948db81f9d0f7bd7a5a72b6c4e80.exe
Size

2.9MB
MD5

10c4948db81f9d0f7bd7a5a72b6c4e80
SHA1

6fcaaa5dfb3a3dc08effdec23654c29f8d936177
SHA256

cac328b605f5c81cfb3dc78cbe8179f8eb4c988736a6eaf7a1fa20eb9a67c995
SHA512

dfa22a2f6cc2e4c2cc8cb39d3e04de1bf5335c9dd86f17d9384e09183049b3e65a97293e506f7cda2eb96e68a1247b88d830ca0914e8a44912a536ed413c1356
SSDEEP

49152:5JTKHUQkBYSKE4jwLQ4QdaC5rcLlsimSOkmbqJ16uKdjpjaP9Q++0R++lZ0:5UUQkBYpE40LgcZOb8JQuKdNgQn0Rlla

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.10c4948db81f9d0f7bd7a5a72b6c4e80.exe

Files

NEAS.10c4948db81f9d0f7bd7a5a72b6c4e80.exe
.dll windows:4 windows x86

e3a4fa93d6d87a48b8aefa3c9d48e381

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

perl58

Perl_Tcurcop_ptr
Perl_ninstr
Perl_safesysfree
Perl_sv_free
Perl_sv_setuv
Perl_newSVpv
Perl_Icompiling_ptr
Perl_sv_2uv
Perl_warn_nocontext
Perl_newSVsv
PL_memory_wrap
Perl_Isv_yes_ptr
Perl_newXS
Perl_form
Perl_sv_catpvn_flags
Perl_croak_nocontext
Perl_sv_upgrade
Perl_get_sv
Perl_sv_grow
Perl_ILIO_ptr
Perl_newSV
Perl_sv_backoff
Perl_safesysmalloc
Perl_sv_2iv
Perl_sv_setref_pv
Perl_sv_derived_from
Perl_get_context
Perl_sv_2pv_nolen
Perl_sv_setpv
Perl_Tstack_base_ptr
Perl_Tstack_sp_ptr
Perl_Tmarkstack_ptr_ptr
Perl_Tcurpad_ptr
Perl_croak
Perl_Top_ptr
Perl_newSVpvf_nocontext
Perl_sv_newmortal
Perl_sv_2pv_flags
Perl_Isv_undef_ptr
Perl_Tstack_max_ptr
Perl_stack_grow
Perl_sv_setiv
Perl_sv_setpvn
Perl_mg_set
Perl_newSViv
Perl_sv_2mortal
Perl_dowantarray

msvcrt

_adjust_fdiv
strcat
_initterm
fflush
fputc
free
fclose
fwrite
sprintf
fread
strcpy
fopen
malloc
fprintf
ftell
_fdopen
strcmp
memmove
memcpy
memset
_errno
strerror
memcmp
strlen
printf

kernel32

DisableThreadLibraryCalls

Exports

Exports

_boot_Compress__Zlib
boot_Compress__Zlib

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3a4fa93d6d87a48b8aefa3c9d48e381

Headers

File Characteristics

Imports

perl58

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 1KB