NEAS[.]5dfae00a6b0aa325b0cd7aea07617e90_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5dfae00a6b0aa325b0cd7aea07617e90_JC.exe
Size

607KB
MD5

5dfae00a6b0aa325b0cd7aea07617e90
SHA1

4c6d365f1c97b49a38d69ce43533edcf6bd419e6
SHA256

dd85b90dca960a2a3703db9be0c10f545fdb2569f39d1b90cd8e534e14b6df66
SHA512

5d0057fec1824a234ae2fb955b8921059432815d2cbee38c9787b25f3a4ce515775f0b2581c9070bae07d6564a119bb7ee9efebef71fed9650ef29b313c519e0
SSDEEP

12288:XDkKmjwm2OURH4Y4K+bTLrlw87Gu2NKizKu6:X6jAO2YY83nlV6JJP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5dfae00a6b0aa325b0cd7aea07617e90_JC.exe

Files

NEAS.5dfae00a6b0aa325b0cd7aea07617e90_JC.exe
.exe windows:5 windows x64

54b706aa831bc88e7ad23b83c6fe5291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ole32

CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoSetProxyBlanket

oleaut32

SysAllocString
VariantInit
VariantClear

kernel32

HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
HeapFree
IsValidCodePage
LocalAlloc
GetCommandLineA
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
GetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

54b706aa831bc88e7ad23b83c6fe5291

Headers

DLL Characteristics

File Characteristics

Imports

ole32

oleaut32

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 568KB - Virtual size: 572KB