NEAS[.]0710202301590d27d54abab904d2101253737eba3a5a7bec0cbbee788531bcbc37bca8df5248_JC[.]exe

Resubmissions

11/10/2023, 15:31

231011-sycz7ahg33 10

06/10/2023, 20:28

231006-y8zvlafg2y 10

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0710202301590d27d54abab904d2101253737eba3a5a7bec0cbbee788531bcbc37bca8df5248_JC.exe
Size

228KB
MD5

4d77432a5254e4e60d9bec21bf4ea524
SHA1

80cb3f7df44b10ee5c767392fb97738000b3b07e
SHA256

0d27d54abab904d2101253737eba3a5a7bec0cbbee788531bcbc37bca8df5248
SHA512

1be4122900b4536215f71bb069757f9cb04579b8c442e45e1f571ffcdae17144afd8d121625c7ca701c4443c1ec4ef366db5839f27f649832561cdc57dfcf809
SSDEEP

1536:GMubDmi54nqRVz01Ze7wBTTPrqRxb4MjSgjL84qqWcsUzK5qOisz032Q:GMubPKszEkJp0jqWcsUG5pisg32Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0710202301590d27d54abab904d2101253737eba3a5a7bec0cbbee788531bcbc37bca8df5248_JC.exe

Files

NEAS.0710202301590d27d54abab904d2101253737eba3a5a7bec0cbbee788531bcbc37bca8df5248_JC.exe
.exe windows:5 windows x86

ea4e9e661dd76e5830aa3e10f8bf0c4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
SetConsoleTextAttribute
ReadConsoleA
CreateDirectoryExA
FreeEnvironmentStringsA
GetConsoleTitleA
CreateDirectoryExW
LoadLibraryW
LeaveCriticalSection
WriteConsoleW
ReplaceFileW
GetMailslotInfo
GetBinaryTypeW
lstrlenW
GetStdHandle
GetCPInfoExW
MoveFileExA
GetProcAddress
VirtualAlloc
MoveFileW
WriteProfileSectionA
WriteConsoleA
GetProcessWorkingSetSize
SetCalendarInfoW
GetModuleHandleA
FindFirstChangeNotificationA
QueueUserWorkItem
VirtualProtect
GetConsoleAliasesLengthW
GetLastError
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
EnterCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
HeapCreate
VirtualFree
HeapFree
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
ReadFile
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleOutputCP
FlushFileBuffers
HeapSize
CreateFileA
CloseHandle

user32

ScreenToClient

advapi32

ClearEventLogW

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

ea4e9e661dd76e5830aa3e10f8bf0c4c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 180KB - Virtual size: 180KB

.data Size: 32KB - Virtual size: 295KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 180KB - Virtual size: 180KB

.data
Size: 32KB - Virtual size: 295KB

.rsrc
Size: 15KB - Virtual size: 14KB