NEAS[.]fc76032d3d8779508b8854480338e695exe_JC[.]exe

General

Target

NEAS.fc76032d3d8779508b8854480338e695exe_JC.exe
Size

704KB
MD5

fc76032d3d8779508b8854480338e695
SHA1

17c452fb3b55cebf86c1a275d9f57aa4f869a3af
SHA256

e1894722d49b6e04f00b0dd09f674e3e0f37d9e85085ebf95b22ed95c70d49cf
SHA512

ca0698d2efa539fe9941bab6e55ac2dfe66f28d3aa19028fa6002a4873aa53cd293e3cc566b07648fbb9a8d5c1c6a018d0f0dbeff335a3553b61c5555e17f7a7
SSDEEP

12288:Tjy3r6YkVwJgNnSykgb9cqWnw4q6ZmFhqs4s9v2V+y+BjvrEH73:TWr6YkVRFkgbeqeo68FhqHsZ20y4rEHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fc76032d3d8779508b8854480338e695exe_JC.exe

Files

NEAS.fc76032d3d8779508b8854480338e695exe_JC.exe
.exe windows:4 windows x86

a9042500c45caf1e96695e809a07a5db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CloseHandle
FreeLibrary
GetTempPathA
GetFileAttributesA
GetComputerNameA
GetCurrentDirectoryA
GetModuleFileNameA
SetErrorMode
WriteFile
GetTickCount
CreateFileA
GetLastError
CreateMutexA
OpenMutexA
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

shell32

ShellExecuteA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9042500c45caf1e96695e809a07a5db

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 392KB - Virtual size: 390KB

.rsrc Size: 188KB - Virtual size: 186KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 392KB - Virtual size: 390KB

.rsrc
Size: 188KB - Virtual size: 186KB