NEAS[.]e4c771128825e2adcad710876a5bb1c0[.]exe

General

Target

NEAS.e4c771128825e2adcad710876a5bb1c0.exe
Size

14KB
MD5

e4c771128825e2adcad710876a5bb1c0
SHA1

314d171daefc035d1706d9b4edd539fa4265d3c4
SHA256

657451439506a3ea91052d3f4a4c058636cb050595c3744488d077305900fcee
SHA512

a3dda1bda2393c24000031f2007668e728c2dc61b9d04728d1a60d5d91d7fc1fdcd951234fa9f4fb573fff25419cbe92c8789d574f7381ba11b55ce07dcde5ad
SSDEEP

192:eEpC5T0wRARy88bNPQMAIorreqlTUQkNTVJ0S+hK42Di1u/uwHjP0UN2sOb0bcCc:rwrPdxzyktPTvD4S4IFOA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e4c771128825e2adcad710876a5bb1c0.exe

Files

NEAS.e4c771128825e2adcad710876a5bb1c0.exe
.dll windows:6 windows x64

271bc88785ebc501171e078e33a34a8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vcruntime140

memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memcpy
__std_exception_copy
__C_specific_handler

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
UnhandledExceptionFilter

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

271bc88785ebc501171e078e33a34a8b

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 368B

.pdata Size: 1024B - Virtual size: 552B

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 108B

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 368B

.pdata
Size: 1024B - Virtual size: 552B

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 108B