NEAS[.]6f7e9b61db06d4afe4a5c5d18bbbc880_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6f7e9b61db06d4afe4a5c5d18bbbc880_JC.exe
Size

3.7MB
MD5

6f7e9b61db06d4afe4a5c5d18bbbc880
SHA1

6e64be14235bdc6a2e6ee9345666731ad8ea879d
SHA256

cb85a2a6d282f55a45fa5c15c9f655b1c3f685247fb1bc30d4af31e5df0a188a
SHA512

053b6b01f4993a03bd2d6e87f09fda448012365236557d7e08b9b686ef24486e0ce17fc6eb232c448af6aacd98c425f32e0fa1f1158604feead23688ae7ff15d
SSDEEP

49152:31akMEEnoAXaLetR9wLm7dEgHghWvU+H/TfgKfiKXHoFcI13+mr2LFII6:QkMEEULetUm6hhMTgfUoz13x2GI6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6f7e9b61db06d4afe4a5c5d18bbbc880_JC.exe

Files

NEAS.6f7e9b61db06d4afe4a5c5d18bbbc880_JC.exe
.exe windows:5 windows x86

2ce754589ac0137445d43e2543fbf9aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

LoadIconA

msvcrt

_controlfp

advapi32

RegOpenKeyA

Sections

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata52
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata51
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata5
Size: - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ggg9
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ggg8
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ggg7
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ggg6
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ce754589ac0137445d43e2543fbf9aa

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

advapi32

Sections

.data Size: - Virtual size: 2KB

.rdata52 Size: - Virtual size: 30KB

.rdata51 Size: - Virtual size: 1000B

.rdata5 Size: - Virtual size: 219KB

.text Size: - Virtual size: 3KB

ggg9 Size: - Virtual size: 1KB

ggg8 Size: - Virtual size: 1KB

ggg7 Size: - Virtual size: 1KB

ggg6 Size: - Virtual size: 2KB

.vmp0 Size: - Virtual size: 1.6MB

.vmp1 Size: 1024B - Virtual size: 616B

.vmp2 Size: 3.7MB - Virtual size: 3.7MB

.rsrc Size: 49KB - Virtual size: 48KB

.data
Size: - Virtual size: 2KB

.rdata52
Size: - Virtual size: 30KB

.rdata51
Size: - Virtual size: 1000B

.rdata5
Size: - Virtual size: 219KB

.text
Size: - Virtual size: 3KB

ggg9
Size: - Virtual size: 1KB

ggg8
Size: - Virtual size: 1KB

ggg7
Size: - Virtual size: 1KB

ggg6
Size: - Virtual size: 2KB

.vmp0
Size: - Virtual size: 1.6MB

.vmp1
Size: 1024B - Virtual size: 616B

.vmp2
Size: 3.7MB - Virtual size: 3.7MB

.rsrc
Size: 49KB - Virtual size: 48KB