NEAS[.]6abe857d50fd5222380f8ec3e1ba7fb0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6abe857d50fd5222380f8ec3e1ba7fb0.exe
Size

195KB
MD5

6abe857d50fd5222380f8ec3e1ba7fb0
SHA1

ab6dc4f452caf8a22de23e18d1f9636105e8da0f
SHA256

2acdf0e79d730a65f8f33796333d68c7a71e06f3aafb95da7f013f2cb1d0a9e8
SHA512

86e0900bb4437f13af069fa695914fa2adeb125dac6b4177312daefe4172f89277a58b7c96a528f574b180b8a9c50a4928127f35b81816bcd68c983590e7f522
SSDEEP

3072:078YSLFRdzoakqytZPXlils8LJaEK5IZSp2oqHrrCzQt14:OShRdzoakqyYhJ/NZJHrgQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6abe857d50fd5222380f8ec3e1ba7fb0.exe

Files

NEAS.6abe857d50fd5222380f8ec3e1ba7fb0.exe
.dll windows:4 windows x64

762129bd4cfa2b3827d8675196426e08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libiconv-2

libiconv
libiconv_close
libiconv_open

kernel32

CloseHandle
CreateEventA
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeLibrary
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
GetLastError
GetProcAddress
GetVersion
GetVersionExA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ResetEvent
SetCurrentDirectoryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_assert
_errno
_filelengthi64
_fileno
_initterm
_lock
_lseeki64
_stat64
_unlock
_wfopen
_wstat64
abort
calloc
clearerr
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fputc
fread
free
fsetpos
fwrite
getc
isalpha
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memset
realloc
setvbuf
strcmp
strerror
strlen
strncmp
strncpy
strstr
strtok
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
_strdup
_read
_open
_close

winmm

mciGetErrorStringA
mciSendCommandA

Exports

Exports

CDIO_SECTOR_SYNC_HEADER
_cdio_list_append
_cdio_list_begin
_cdio_list_end
_cdio_list_find
_cdio_list_foreach
_cdio_list_free
_cdio_list_length
_cdio_list_new
_cdio_list_node_data
_cdio_list_node_free
_cdio_list_node_next
_cdio_list_prepend
_cdio_strfreev
_cdio_strsplit
cdio_abspath
cdio_audio_get_msf_seconds
cdio_audio_get_volume
cdio_audio_pause
cdio_audio_play_msf
cdio_audio_play_track_index
cdio_audio_read_subchannel
cdio_audio_resume
cdio_audio_set_volume
cdio_audio_stop
cdio_charset_convert
cdio_charset_converter_create
cdio_charset_converter_destroy
cdio_charset_from_utf8
cdio_charset_to_utf8
cdio_close_tray
cdio_debug
cdio_default_log_handler
cdio_destroy
cdio_device_drivers
cdio_dirname
cdio_driver_describe
cdio_driver_errmsg
cdio_drivers
cdio_eject_media
cdio_eject_media_drive
cdio_error
cdio_free
cdio_free_device_list
cdio_from_bcd8
cdio_get_arg
cdio_get_cdtext
cdio_get_cdtext_raw
cdio_get_default_device
cdio_get_default_device_bincue
cdio_get_default_device_cdrdao
cdio_get_default_device_driver
cdio_get_default_device_freebsd
cdio_get_default_device_linux
cdio_get_default_device_nrg
cdio_get_default_device_osx
cdio_get_default_device_solaris
cdio_get_default_device_win32
cdio_get_devices
cdio_get_devices_bincue
cdio_get_devices_cdrdao
cdio_get_devices_freebsd
cdio_get_devices_linux
cdio_get_devices_nrg
cdio_get_devices_osx
cdio_get_devices_ret
cdio_get_devices_solaris
cdio_get_devices_win32
cdio_get_devices_with_cap
cdio_get_devices_with_cap_ret
cdio_get_disc_last_lsn
cdio_get_discmode
cdio_get_drive_cap
cdio_get_drive_cap_dev
cdio_get_driver_id
cdio_get_driver_name
cdio_get_first_track_num
cdio_get_hwinfo
cdio_get_joliet_level
cdio_get_last_session
cdio_get_last_track_num
cdio_get_mcn
cdio_get_media_changed
cdio_get_num_tracks
cdio_get_track
cdio_get_track_channels
cdio_get_track_copy_permit
cdio_get_track_format
cdio_get_track_green
cdio_get_track_isrc
cdio_get_track_last_lsn
cdio_get_track_lba
cdio_get_track_lsn
cdio_get_track_msf
cdio_get_track_preemphasis
cdio_get_track_pregap_lba
cdio_get_track_pregap_lsn
cdio_get_track_sec_count
cdio_guess_cd_type
cdio_have_atapi
cdio_have_bincue
cdio_have_cdrdao
cdio_have_driver
cdio_have_freebsd
cdio_have_linux
cdio_have_netbsd
cdio_have_nrg
cdio_have_osx
cdio_have_solaris
cdio_have_win32
cdio_info
cdio_init
cdio_is_binfile
cdio_is_cuefile
cdio_is_device
cdio_is_discmode_cdrom
cdio_is_discmode_dvd
cdio_is_nrg
cdio_is_tocfile
cdio_lba_to_lsn
cdio_lba_to_msf
cdio_lba_to_msf_str
cdio_log
cdio_log_set_handler
cdio_loglevel_default
cdio_lseek
cdio_lsn_to_lba
cdio_lsn_to_msf
cdio_msf_to_lba
cdio_msf_to_lsn
cdio_msf_to_str
cdio_open
cdio_open_am
cdio_open_am_bincue
cdio_open_am_cd
cdio_open_am_cdrdao
cdio_open_am_freebsd
cdio_open_am_linux
cdio_open_am_netbsd
cdio_open_am_nrg
cdio_open_am_osx
cdio_open_am_solaris
cdio_open_am_win32
cdio_open_bincue
cdio_open_cd
cdio_open_cdrdao
cdio_open_cue
cdio_open_freebsd
cdio_open_linux
cdio_open_netbsd
cdio_open_nrg
cdio_open_osx
cdio_open_solaris
cdio_open_win32
cdio_os_driver
cdio_read
cdio_read_audio_sector
cdio_read_audio_sectors
cdio_read_data_sectors
cdio_read_mode1_sector
cdio_read_mode1_sectors
cdio_read_mode2_sector
cdio_read_mode2_sectors
cdio_read_sector
cdio_read_sectors
cdio_realpath
cdio_set_arg
cdio_set_blocksize
cdio_set_speed
cdio_stdio_destroy
cdio_stdio_new
cdio_stream_getpos
cdio_stream_read
cdio_stream_seek
cdio_to_bcd8
cdio_version_string
cdio_warn
cdtext_data_init
cdtext_destroy
cdtext_field2str
cdtext_genre2str
cdtext_get
cdtext_get_const
cdtext_get_first_track
cdtext_get_genre
cdtext_get_language
cdtext_get_last_track
cdtext_init
cdtext_lang2str
cdtext_list_languages
cdtext_list_languages_v2
cdtext_select_language
cdtext_set
cdtext_set_language_index
cdtext_str2lang
debug_cdio_mmc_feature
debug_cdio_mmc_feature_interface
debug_cdio_mmc_feature_profile
debug_cdio_mmc_get_conf
debug_cdio_mmc_gpcmd
debug_cdio_mmc_read_sub_state
discmode2str
libcdio_version_num
mmc_audio_read_subchannel
mmc_audio_state2str
mmc_close_tray
mmc_cmd2str
mmc_eject_media
mmc_feature2str
mmc_feature_profile2str
mmc_get_blocksize
mmc_get_cmd_len
mmc_get_configuration
mmc_get_disc_erasable
mmc_get_discmode
mmc_get_disctype
mmc_get_drive_mmc_cap
mmc_get_dvd_struct_physical
mmc_get_event_status
mmc_get_hwinfo
mmc_get_mcn
mmc_get_media_changed
mmc_get_track_isrc
mmc_get_tray_status
mmc_have_interface
mmc_is_disctype_bd
mmc_is_disctype_cdrom
mmc_is_disctype_dvd
mmc_is_disctype_hd_dvd
mmc_is_disctype_overwritable
mmc_last_cmd_sense
mmc_mode_select_10
mmc_mode_sense
mmc_mode_sense_10
mmc_mode_sense_6
mmc_prevent_allow_medium_removal
mmc_read_cd
mmc_read_cdtext
mmc_read_data_sectors
mmc_read_disc_information
mmc_read_sectors
mmc_read_timeout_ms
mmc_run_cmd
mmc_run_cmd_len
mmc_sense_key2str
mmc_set_blocksize
mmc_set_speed
mmc_start_stop_unit
mmc_test_unit_ready
mmc_timeout_ms
track_format2str

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

762129bd4cfa2b3827d8675196426e08

Headers

DLL Characteristics

File Characteristics

Imports

libiconv-2

kernel32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 138KB - Virtual size: 137KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 27KB - Virtual size: 26KB

.pdata Size: 7KB - Virtual size: 6KB

.xdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 18KB

.edata Size: 7KB - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 744B

.text
Size: 138KB - Virtual size: 137KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 27KB - Virtual size: 26KB

.pdata
Size: 7KB - Virtual size: 6KB

.xdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 18KB

.edata
Size: 7KB - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 744B