NEAS[.]0839710d13a1aa0b301a89776777c250_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0839710d13a1aa0b301a89776777c250_JC.exe
Size

128KB
MD5

0839710d13a1aa0b301a89776777c250
SHA1

db715cb57a07db712973a0471cec93af60afbf26
SHA256

fa369c88653c3a0144cb0b4dd7854c28a1ae0d7f8de2231d67cd2bec5f791c6e
SHA512

9ba1c5091890065e77bafa59579b6bc4fa26b60b45c9d876f703a24a50063c8744d20d794eed35aa951509def407af69e34437412fefe8ff7e38fd88b14c606a
SSDEEP

3072:LUv6HJeZmKM2reWSLxuMWGSd7SmnMJODMUlkkni0n6QP:YsJ6M8eR7PIfn8OWt0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0839710d13a1aa0b301a89776777c250_JC.exe

Files

NEAS.0839710d13a1aa0b301a89776777c250_JC.exe
.exe windows:4 windows x86

47957eabd344f824fe0c4826ba528bd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
GetDateFormatA
DeleteFileW
SetVolumeMountPointA
GetLongPathNameW
ReadFileScatter
WaitForDebugEvent
FatalExit
GetUserDefaultLCID
HeapCreate
GetVolumeNameForVolumeMountPointA
SetDefaultCommConfigW
QueryInformationJobObject
GetSystemInfo
GetLastError
QueryPerformanceCounter
BackupWrite
SetMailslotInfo
UpdateResourceW
SearchPathA
GetThreadPriorityBoost
WriteProfileStringW
ExitProcess
GetPrivateProfileIntW
SetTimeZoneInformation
CreateJobObjectA
CreateEventW
SleepEx
_hread
lstrcpyW
GetModuleHandleW
GetTimeFormatA
LocalUnlock

shell32

SHInvokePrinterCommandA

user32

EmptyClipboard
GetLastInputInfo
GetMenuInfo
ArrangeIconicWindows
SubtractRect
GetClassInfoExA
LoadMenuA
CharNextExA
WinHelpA
GetWindowPlacement
EnumChildWindows
GetScrollInfo
CharNextA
SetLayeredWindowAttributes
SetCapture
IsCharAlphaW
GetWindowTextLengthA
SetWindowLongW
GetWindow
MonitorFromPoint
GetDlgItemTextW
DefWindowProcA
PostQuitMessage
RemovePropA
BeginDeferWindowPos
UnpackDDElParam
DdeInitializeW
AllowSetForegroundWindow
WinHelpW
SetRect
EnumDesktopWindows
DlgDirListComboBoxA
DestroyWindow
SetMessageQueue
ToAsciiEx
GetClassLongW
GetClientRect
EnumPropsA
SetScrollInfo
ScrollWindowEx
GetIconInfo
GetMenuItemCount
GetPriorityClipboardFormat
SendIMEMessageExW
FindWindowW
CascadeChildWindows
IsWindowVisible
GetMessageA
RedrawWindow
ClipCursor
RegisterDeviceNotificationW
wvsprintfA
CallWindowProcW
DdeAccessData
DlgDirListA
ShowCaret
ImpersonateDdeClientWindow
DdeGetLastError
SetWindowPlacement
LoadCursorA
GetKeyboardState
IsDialogMessageA
IsDlgButtonChecked
MonitorFromWindow
RegisterHotKey
DragObject
GetProcessWindowStation
SetKeyboardState
GetMenuDefaultItem
SetClassWord
PostMessageW
ValidateRgn
SetClipboardViewer
GetCursor
CheckMenuItem
TabbedTextOutA
DeleteMenu
SetDlgItemInt
EnumClipboardFormats
OpenClipboard
CloseClipboard
ToUnicodeEx
MessageBeep
LoadBitmapA
DdeUnaccessData
DrawTextA
GetDesktopWindow
GetShellWindow
GetClassInfoW
GetSysColor
SetFocus
EnumPropsExA
DdeEnableCallback
DialogBoxIndirectParamA
WaitForInputIdle
VkKeyScanExA
MapDialogRect
CreateCaret
GetCaretBlinkTime

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47957eabd344f824fe0c4826ba528bd3

Headers

File Characteristics

Imports

kernel32

shell32

user32

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 43KB - Virtual size: 42KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 43KB - Virtual size: 42KB

.rsrc
Size: 1KB - Virtual size: 1KB