NEAS[.]e2172463378adc6acf61edead72f5d80[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e2172463378adc6acf61edead72f5d80.exe
Size

1.4MB
MD5

e2172463378adc6acf61edead72f5d80
SHA1

f3714de0211a090081e7eb24bf8ec4d9bf37ec9b
SHA256

ff738e87d8a1a461b0a198386957e2de56eeb88348a4e09430dca0dedace6ca6
SHA512

31417ad13af918153625133cb45b87be3dead78ea343096b151677204317863e042d46640d0da75167d53d1a2368cbd4ae76078a9403be7ce05dad56831f96db
SSDEEP

24576:7/uW1nXIgEUd97uz+UxTCNY8GXDuCqmb5YZSiYcVQ8Z1Sj2Juc5UgMkm+9gt:7fXaGd/SXDX15Yx3V9ICYcSpeOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e2172463378adc6acf61edead72f5d80.exe

Files

NEAS.e2172463378adc6acf61edead72f5d80.exe
.exe windows:6 windows x86

42d46926746fd85fce3dfcf1ae987680

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr120d

_except_handler4_common
_crt_debugger_hook
__crtTerminateProcess
__crtUnhandledException
_hypot
?terminate@@YAXXZ
memcpy
memmove
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
fopen
rewind
fgets
strtok
feof
??2@YAPAXI@Z
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
_CxxThrowException
__CxxDetectRethrow
__CxxUnregisterExceptionObject
??_V@YAXPAX@Z
strlen
_cexit
_amsg_exit
__FrameUnwindFilter
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_purecall
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?what@exception@std@@UBEPBDXZ

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GetCurrentThreadId
IsProcessorFeaturePresent
IsDebuggerPresent

msvcp120d

?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Debug_message@std@@YAXPB_W0I@Z
??1_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??0_Container_base12@std@@QAE@XZ
?_Xbad_alloc@std@@YAXXZ
??0_Lockit@std@@QAE@H@Z

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42d46926746fd85fce3dfcf1ae987680

Headers

DLL Characteristics

File Characteristics

Imports

msvcr120d

kernel32

msvcp120d

mscoree

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB