NEAS[.]7135c27269591f8424ff30eaf7daf8e0[.]exe

General

Target

NEAS.7135c27269591f8424ff30eaf7daf8e0.exe
Size

13KB
MD5

7135c27269591f8424ff30eaf7daf8e0
SHA1

95f8f6d5ca5800d697a29c082436e32ac557221d
SHA256

3e815cc6662d1a140b5415e95478728a7a074339658ebe6f3286249be115f17d
SHA512

528eb55e4a8d693fe494bb7c86a5d484c94d8a3d1ac62bb4f9fde15e4afd89482e14d7672665d653d2d1029d9b29ef75c40cf0c6a3f7819d47fc46227a157c70
SSDEEP

384:4eeeeee099C2RYv/f/ghDLQp5n8iJkxUyJ9dgTPE:4eeeeee099C2RYv/f/ghvQki+xVJ9OTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7135c27269591f8424ff30eaf7daf8e0.exe

Files

NEAS.7135c27269591f8424ff30eaf7daf8e0.exe
.dll windows:6 windows x86

b5af14d068bf018781da445646ef1f9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libwine

wine_dbg_log
wine_ldt_copy

kernel32

IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table
_configure_narrow_argv
_execute_onexit_table

Exports

Exports

_wine_spec_dos_header

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5af14d068bf018781da445646ef1f9f

Headers

DLL Characteristics

File Characteristics

Imports

libwine

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 2KB

.rodata Size: 512B - Virtual size: 160B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 496B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 2KB

.rodata
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 496B