NEAS[.]fc6fd607097a4494b2c206777d2a67a0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fc6fd607097a4494b2c206777d2a67a0.exe
Size

5.7MB
MD5

fc6fd607097a4494b2c206777d2a67a0
SHA1

2718c33f4b2a568272c62ff191069176502676f4
SHA256

b09ab2df38c584333b1856934df7b4a02ae3a60b2c005d1217e2c578fe37903a
SHA512

6782b867366c77f8e706e1c344cb5cb931f464ed49c59bdb584408f78257d60051f425400d42149465897034676106811556ffac5322ec954573597482f0910c
SSDEEP

98304:7n3nzDea4L3DpiFn6u1eLEQT9yJoMfuEnbVGn6XcdqJJHpcvAUcq7ANq0fBQHD:jnneVHc6u3QTooMT66XjJJHavAUzE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fc6fd607097a4494b2c206777d2a67a0.exe

Files

NEAS.fc6fd607097a4494b2c206777d2a67a0.exe
.dll windows:6 windows x86

cd9120d16adae338955299900b176a48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

qt5core

?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?qt_metacast@QObject@@UAEPAXPBD@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?getAndRef@ExternalRefCountData@QtSharedPointer@@SAPAU12@PBVQObject@@@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?qRegisterResourceData@@YA_NHPBE00@Z
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
??0QFactoryInterface@@QAE@XZ
??0QString@@QAE@ABV0@@Z
??1QFactoryInterface@@UAE@XZ
??1QObject@@UAE@XZ
??0QObject@@QAE@PAV0@@Z
?end@QListData@@QBEPAPAXXZ
?begin@QListData@@QBEPAPAXXZ
?append@QListData@@QAEPAPAXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?detach@QListData@@QAEPAUData@1@H@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??1QString@@QAE@XZ
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z

vcruntime140

_purecall
__CxxFrameHandler3
__std_terminate
__vcrt_InitializeCriticalSectionEx
memset
_except_handler4_common
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_execute_onexit_table
_crt_atexit
_register_onexit_function
_initterm
_cexit
_configure_narrow_argv
_initialize_onexit_table
_initterm_e
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
CloseHandle

Exports

Exports

qt_plugin_instance
qt_plugin_query_metadata

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd9120d16adae338955299900b176a48

Headers

DLL Characteristics

File Characteristics

Imports

qt5core

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 5.7MB - Virtual size: 5.7MB

.data Size: 512B - Virtual size: 1KB

.qtmetad Size: 512B - Virtual size: 200B

.gfids Size: 512B - Virtual size: 76B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 5.7MB - Virtual size: 5.7MB

.data
Size: 512B - Virtual size: 1KB

.qtmetad
Size: 512B - Virtual size: 200B

.gfids
Size: 512B - Virtual size: 76B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB