NEAS[.]eb3e5641e23a9369eb93508eb5c0b9a0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eb3e5641e23a9369eb93508eb5c0b9a0.exe
Size

56KB
MD5

eb3e5641e23a9369eb93508eb5c0b9a0
SHA1

c28dbd6d26f2f4ba4dd36c5b9aa4cfeee5ac699b
SHA256

b002d640169bf1bf23e0e236a8cbad5db03750219f7bdefe30f53f11a3470db8
SHA512

dba9e695693f40d59f7ff4e5a3f717841e259c46e2afa52f536665f13029f6745c13a0c4e11646070e7fc4178b490f736067baffb5ffeea66111cfb61bc6f9b6
SSDEEP

768:W8hlCiKAJIXwjr5WH0uPYqE6gWJ2YpiBp5mv4I:W8yt8H9uQqlgW8YpEp5mh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eb3e5641e23a9369eb93508eb5c0b9a0.exe

Files

NEAS.eb3e5641e23a9369eb93508eb5c0b9a0.exe
.exe windows:6 windows x86 arch:x86

b1b1c194f34d4395a8d81f7c1244b16c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
EndPaint
BeginPaint
GetDC
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
TranslateMessage
DefWindowProcA
PeekMessageA
DispatchMessageA

gdi32

GetStockObject
SetPixelFormat
SwapBuffers
ChoosePixelFormat

winmm

timeGetTime

opengl32

glMatrixMode
glTexEnvf
glVertex3f
glViewport
wglCreateContext
wglMakeCurrent
glLoadIdentity
glGenTextures
glEnd
glEnable
glDeleteTextures
glColor3f
glClearColor
glClear
glBindTexture
glBegin
glTexCoord2f

glu32

gluLookAt
gluPerspective
gluBuild2DMipmaps

vcruntime140d

_CxxThrowException
memcpy
__CxxFrameHandler3
memset
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_except_handler4_common
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW

ucrtbased

_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
__stdio_common_vsprintf_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
_c_exit
_wmakepath_s
_wsplitpath_s
wcscpy_s
_callnewh
_CrtDbgReportW
_CrtDbgReport
sin
fseek
fread
fopen
fgetc
fclose
_cexit
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
terminate
malloc
cos

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
FreeLibrary
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1b1c194f34d4395a8d81f7c1244b16c

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

winmm

opengl32

glu32

vcruntime140d

ucrtbased

kernel32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 4KB

.gfids Size: 512B - Virtual size: 383B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.gfids
Size: 512B - Virtual size: 383B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB