NEAS[.]1b3edb3866981f7de2faaf75e14fd6c0[.]exe

General

Target

NEAS.1b3edb3866981f7de2faaf75e14fd6c0.exe
Size

1.1MB
MD5

1b3edb3866981f7de2faaf75e14fd6c0
SHA1

fae92fd8035510f1e5534f256262c6368af496ad
SHA256

50909b7e1810a37cb2eb72d2b46c8cd3b65166be6251a54adba0a6e33f277813
SHA512

c0b38114bad24cd0c182fd6a9b2198a40177469b10633b0625dcc33285cc0a67812ff6af78c3a8cdc2487012a23898b8611c8952c97f37d8ea788756c9afc4d9
SSDEEP

24576:JLFyiPh8Y7TKqPVKgrawlywFEa7v3Vd2iLw8CvxyXgp1E/b4b1b/bGWpbEboW:pFnPH7TTVK6xd347

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1b3edb3866981f7de2faaf75e14fd6c0.exe

Files

NEAS.1b3edb3866981f7de2faaf75e14fd6c0.exe
.dll windows:5 windows x86

59985e4a2422e62dd4f42d63cd695daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
memset
memcpy
memmove
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer

kernel32

HeapFree
GetProcessHeap
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

XMemCompress
XMemCompressStream
XMemCreateCompressionContext
XMemCreateDecompressionContext
XMemDecompress
XMemDecompressStream
XMemDestroyCompressionContext
XMemDestroyDecompressionContext
XMemGetCompressionContextSize
XMemGetDecompressionContextSize
XMemInitializeCompressionContext
XMemInitializeDecompressionContext
XMemResetCompressionContext
XMemResetDecompressionContext

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59985e4a2422e62dd4f42d63cd695daa

Headers

File Characteristics

Imports

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 880B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1024B - Virtual size: 534B

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 880B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1024B - Virtual size: 534B