NEAS[.]8bb2ee9737bf050ffa09b965d4a051c0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8bb2ee9737bf050ffa09b965d4a051c0.exe
Size

26KB
MD5

8bb2ee9737bf050ffa09b965d4a051c0
SHA1

f74dfdeacce822e0d2ed75dd1d084a548e63763f
SHA256

1eac48252a17979f765de4597ceefa3c2c6d4691b80296a09985386d100dfb8b
SHA512

b51b99715cc3c904ca75760bfd9a1aefd0d80e8a15d5810a9358752539ad53b02f80ba51fe2af66b2564c718f48a07e73cf07b31eaec36f26a8d5d27499c5f38
SSDEEP

768:TSdA/KKL7H1kT1ynQ5fliwUVpwuhOBtHJ9pq/:Tn7u4Q5fDB9J3q/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8bb2ee9737bf050ffa09b965d4a051c0.exe

Files

NEAS.8bb2ee9737bf050ffa09b965d4a051c0.exe
.dll windows:6 windows x86

6d6c0965e5184e2bfdefbcc4b401d1b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gstaudio-1.0-0

gst_audio_converter_get_out_frames
gst_audio_resampler_filter_interpolation_get_type
gst_audio_resampler_method_get_type
gst_audio_info_from_caps
gst_audio_info_is_equal
gst_audio_buffer_map
gst_audio_buffer_unmap
gst_audio_resampler_filter_mode_get_type
gst_audio_converter_new
gst_audio_converter_free
gst_audio_converter_reset
gst_audio_converter_get_in_frames
gst_audio_converter_get_max_latency
gst_audio_converter_samples
gst_audio_resampler_options_set_quality
gst_audio_buffer_clip
gst_buffer_add_audio_meta
gst_audio_converter_update_config

gstbase-1.0-0

gst_base_transform_is_passthrough
gst_base_transform_set_gap_aware
gst_base_transform_get_type

gstreamer-1.0-0

gst_util_uint64_scale_int_round
_gst_debug_register_funcptr
_gst_debug_category_new
gst_debug_log
gst_element_post_message
gst_element_class_set_static_metadata
gst_element_class_add_static_pad_template
gst_element_register
gst_plugin_register_static
gst_pad_query_default
gst_pad_set_query_function_full
gst_pad_peer_query
gst_pad_push
gst_flow_get_name
gst_message_new_latency
gst_query_parse_latency
gst_query_set_latency
gst_buffer_set_size
gst_buffer_get_size
gst_buffer_peek_memory
gst_type_mark_as_plugin_api
gst_util_uint64_scale_round
gst_meta_api_type_get_tags
gst_meta_api_type_has_tag
gst_caps_fixate
gst_caps_intersect_full
gst_caps_is_subset_structure
gst_caps_truncate
gst_caps_get_structure
gst_caps_get_size
gst_caps_append_structure
gst_caps_new_empty
gst_structure_fixate_field_nearest_int
gst_structure_get_int
gst_structure_get_value
gst_structure_set
gst_structure_free
gst_structure_copy
gst_structure_new_empty
gst_mini_object_make_writable
gst_mini_object_is_writable
gst_mini_object_unref
gst_util_uint64_scale_int_ceil
_gst_debug_min
_gst_int_range_type
gst_buffer_n_memory
gst_buffer_new_allocate

glib-2.0-0

g_once_init_enter
g_intern_static_string
g_quark_from_static_string
g_log
g_strv_length
g_assertion_message_expr
g_once_init_leave

gobject-2.0-0

g_param_spec_int
g_type_name
g_type_class_peek_parent
g_type_register_static_simple
g_type_class_adjust_private_offset
g_object_class_install_property
g_value_set_enum
g_value_get_enum
g_value_get_int
g_param_spec_uint
g_value_get_uint
g_value_set_uint
g_param_spec_enum
g_value_set_int

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_onexit_table
_initterm_e
_initterm
_initialize_narrow_environment
_cexit
_execute_onexit_table
_seh_filter_dll

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

Exports

Exports

gst_plugin_audioresample_get_desc
gst_plugin_audioresample_register

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d6c0965e5184e2bfdefbcc4b401d1b0

Headers

DLL Characteristics

File Characteristics

Imports

gstaudio-1.0-0

gstbase-1.0-0

gstreamer-1.0-0

glib-2.0-0

gobject-2.0-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1008B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1008B

.reloc
Size: 1KB - Virtual size: 1KB