d139fc9c5ea0b2bbf0745d1b60182300_NEAS

Sharing

Copy URL

Twitter E-mail

General

Target

d139fc9c5ea0b2bbf0745d1b60182300_NEAS
Size

39KB
MD5

d139fc9c5ea0b2bbf0745d1b60182300
SHA1

a0262692e9386c05d0ef95826f5ade8081fc1218
SHA256

53e7ca987ea6f5cc40a35b64ec42e09d94d03c559b549c47996c87acb9b92a8f
SHA512

163e9635c3540c12b991e7a8af28d349b8c848c459c895e68a39987968a4a487df017bf7ea9372bde8a67fa5ef26affb0b7e371118924d7ef2ecbb785bdd3132
SSDEEP

768:DrJTmRmBmmmLm2mpm2qFbHRAYezXWn1cVh4hfIJFcrs3s3rZozMCkb:D5mRmBmmmLm2mpm2QbHzezm1cVh4JIJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d139fc9c5ea0b2bbf0745d1b60182300_NEAS

Files

d139fc9c5ea0b2bbf0745d1b60182300_NEAS
.exe windows:6 windows x86 arch:x86

1d82417134e7aea580e3e250ba2a12f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\VS\chenanqi\chenanqi\Debug\chenanqi.pdb

Imports

libifcoremdd

for_rtl_init_
for_rtl_finish_
libc_fpieee_version
for__nt_signal_handler
for_open
for_emit_diagnostic
for_write_seq_lis
for_write_seq_lis_xmit
for_set_reentrancy
for_pause

libmmd

cpowf
ccosf
csinf
sqrtf
powf

msvcr120d

_initterm
__initenv
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_initterm_e
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
memset
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_except_handler3
_fpieee_flt
signal
strlen
strncat
sprintf
vsprintf
strncpy
printf
_calloc_dbg

kernel32

GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
FormatMessageA
LoadLibraryA
GetThreadLocale
HeapAlloc
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d82417134e7aea580e3e250ba2a12f1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libifcoremdd

libmmd

msvcr120d

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.text1 Size: 512B - Virtual size: 80B

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 2KB

.trace Size: 512B - Virtual size: 160B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.text1
Size: 512B - Virtual size: 80B

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 2KB

.trace
Size: 512B - Virtual size: 160B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 1KB