NEAS[.]ed5fdef6e7d6ec8f7f6f3fd7ad5ee610[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ed5fdef6e7d6ec8f7f6f3fd7ad5ee610.exe
Size

282KB
MD5

ed5fdef6e7d6ec8f7f6f3fd7ad5ee610
SHA1

b255a0937725752306df200b24c882b9798883cc
SHA256

5221499cf7c48961bd9d8cd005364c2f075de5a086ad485a4081e775d362b195
SHA512

74acb13914d442bcde6213afa2fd3e45454ea9d7dea53de76561056f7f5a465208d70bde7dd60eefb3a40e24bd762c651c4028981a214477f0fd6f7d3dc0fe46
SSDEEP

3072:j9g6Nv5tToUVB5E3UJY4kReYbkr5firmw8O6l6uYi70hEvuiQsodEb:Jg8H88bGtkYYrlirmw8pj70hDiQDEb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ed5fdef6e7d6ec8f7f6f3fd7ad5ee610.exe

Files

NEAS.ed5fdef6e7d6ec8f7f6f3fd7ad5ee610.exe
.dll windows:5 windows x86 arch:x86

03d7f5ca71750e22a94e6670f70493b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
CreateMutexW
CloseHandle
ReadFile
WriteFile
LoadLibraryW
GetLastError
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetModuleHandleW
Sleep
ExitProcess
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
RtlUnwind
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileA
SetFilePointer
SetStdHandle
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap

Exports

Exports

BROM_Lte_Load_And_Jump_To_DA
Brom_Lte_Auth
Brom_Lte_DebugOff
Brom_Lte_DebugOn
Brom_Lte_Get_Chip_Id_And_Version
Brom_Lte_Get_MEID
Brom_Lte_Jump_To_CS
Brom_Lte_Read
Brom_Lte_Write

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

03d7f5ca71750e22a94e6670f70493b4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 19KB - Virtual size: 25KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text Size: 187KB - Virtual size: 188KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 19KB - Virtual size: 25KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 187KB - Virtual size: 188KB