NEAS[.]2982ac226ad5a676261873e5c5716fe0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2982ac226ad5a676261873e5c5716fe0.exe
Size

20KB
MD5

2982ac226ad5a676261873e5c5716fe0
SHA1

aec4b9986d46eb9a06ecd862968d16016cb9d823
SHA256

f8bc277f9fde6935102cc03524b4cc2cc82fcda6d42ea9ae2e29ae232e7e56ac
SHA512

28c9d688ee62ea8f14ceb7fbf60aa04fb4a431e79e7ef918579e0ad7ee0e95ff01e22de711d512f86b66b1a65f43013e179e8dfb9860a335c32b81b8fc1eda1d
SSDEEP

384:jHqBmMgMZ18vPrRZRbPpD8m0xjVp0l488NcnlF6g1l+psZ:jPvMClPpQPql41NceOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2982ac226ad5a676261873e5c5716fe0.exe

Files

NEAS.2982ac226ad5a676261873e5c5716fe0.exe
.dll windows:6 windows x86

a88760d96e106966d8ae59759b88693a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gstreamer-1.0-0

gst_value_get_caps
gst_value_set_caps
gst_registry_get
gst_registry_feature_filter
gst_pad_query_caps
gst_type_mark_as_plugin_api
_gst_caps_type
gst_plugin_register_static
_gst_debug_category_new
gst_bin_remove
_gst_debug_register_funcptr
gst_ghost_pad_set_target
gst_ghost_pad_new_no_target
gst_library_error_quark
gst_bin_set_suppressed_flags
gst_element_register
gst_bin_add
gst_bin_get_type
gst_element_set_state
gst_element_post_message
gst_element_get_static_pad
gst_element_add_pad
gst_element_set_bus
gst_element_factory_create
gst_element_factory_get_metadata
gst_element_factory_get_type
gst_plugin_feature_rank_compare_func
gst_plugin_feature_list_free
gst_plugin_feature_get_rank
gst_bus_pop_filtered
gst_bus_new
gst_message_new_warning
gst_message_parse_error
gst_caps_can_intersect
gst_static_caps_get
gst_mini_object_copy
gst_mini_object_unref
gst_object_unref
_gst_debug_min
gst_util_set_object_arg
gst_debug_log
gst_resource_error_quark
gst_element_message_full
_gst_element_error_printf
gst_element_factory_make
gst_element_class_set_static_metadata
gst_element_class_add_static_pad_template

glib-2.0-0

g_strcmp0
g_strdup_printf
g_strdup
g_str_has_prefix
g_str_has_suffix
g_slist_foreach
g_slist_append
g_slist_free
g_list_sort
g_free
g_intern_static_string
g_once_init_enter
g_once_init_leave
g_log
g_error_free

gobject-2.0-0

g_value_get_boolean
g_value_set_boolean
g_param_spec_boxed
g_param_spec_boolean
g_object_class_find_property
g_type_check_instance_is_a
g_value_get_int64
g_value_set_int64
g_param_spec_int64
g_type_class_adjust_private_offset
g_type_name
g_type_class_peek_parent
g_type_register_static_simple
g_object_set
g_object_class_install_property
g_object_set_property

vcruntime140

memmove
__std_type_info_destroy_list
strstr
memset
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_cexit

kernel32

GetCurrentThreadId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

gst_plugin_autodetect_get_desc
gst_plugin_autodetect_register

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a88760d96e106966d8ae59759b88693a

Headers

DLL Characteristics

File Characteristics

Imports

gstreamer-1.0-0

glib-2.0-0

gobject-2.0-0

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB