NEAS[.]48f052b9af7dd5b1c2d650c3791e40d0[.]exe

General

Target

NEAS.48f052b9af7dd5b1c2d650c3791e40d0.exe
Size

48KB
MD5

48f052b9af7dd5b1c2d650c3791e40d0
SHA1

116b08664a4493b0958fe869fb8df71e02e465b9
SHA256

f468e0cb44d77440664e1329d7be5b7a62cd764b086cfe636a492bec0c0ea7f8
SHA512

222d7cf3d253e88aec8982be42b44e8156ff441a4a0eba8af2f4492b952bde0f597ce08f5ad6b35747377eb19b8756f74483f5420096ffb46b66e61c1afbaf0b
SSDEEP

384:QRcIl4bB/Jpei2C2h2ljO8Jkp9F42EfanyjQ02fdx83Fsh07nvG2I9U4YPIWRHog:K4baC2h2l68KVnmsx8w8n+26Ygqvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48f052b9af7dd5b1c2d650c3791e40d0.exe

Files

NEAS.48f052b9af7dd5b1c2d650c3791e40d0.exe
.exe windows:4 windows x86

9e54f153b2f9ffc247b740d4e02c5966

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

perl58

Perl_win32_init
Perl_Gdo_undump_ptr
perl_alloc
perl_construct
Perl_Iperl_destruct_level_ptr
Perl_Iexit_flags_ptr
perl_parse
perl_run
perl_destruct
perl_free
Perl_win32_term
Perl_Ttainted_ptr
Perl_gv_fetchpv
Perl_av_fetch
Perl_sv_2pv_nolen
Perl_av_shift
Perl_sv_setpv
Perl_mg_set
Perl_safesysmalloc
Perl_safesysfree
Perl_Icompcv_ptr
Perl_croak_nocontext
Perl_IDir_ptr
Perl_IProc_ptr
Perl_IMem_ptr
Perl_ILIO_ptr
Perl_Tstatbuf_ptr
boot_DynaLoader
Perl_get_context
Perl_newXS

kernel32

GetModuleFileNameA
FreeLibrary
GetModuleHandleA

advapi32

GetUserNameA

msvcrt

__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_strnicmp
_strdup
_findfirst
_findnext
_unlink
__set_app_type
_rmdir
memset
memcpy
__mb_cur_max
_isctype
_pctype
strncmp
strncpy
memmove
__p__environ
strstr
strlen
strtok
strcmp
sprintf
_except_handler3
_controlfp
_findclose

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e54f153b2f9ffc247b740d4e02c5966

Headers

File Characteristics

Imports

perl58

kernel32

advapi32

msvcrt

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB