NEAS[.]05664929a973272c5661325a80f77b90_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
NEAS.05664929a973272c5661325a80f77b90_JC.exe
Size 260KB
Sample231012-tc67kscc63
SHA256 117ce44e32095df219483872d4df7c6f13f62aee848779152d294857dcc53e82
MD5 05664929a973272c5661325a80f77b90
SHA1 9c7e1deb30f16cae66b42e385a815bfb62ec3611
SHA512 7916851648055b89dd0245e67518d7e6936dca53d7206a4e0a9aeec33494be616b8b93433fa01e608211ca7df28e07baf0dfcc5a2f925d1176dd374ce5d7d1f2
SSDEEP 3072:lV5J7ftwoflUgXeenxV6FUhRlugpJ+oUfgYE5G+aWqQffCFFZn156JKrdI3ams7O:b7fapZ4Oef+NE5HnKF4KrdI3amWgJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05664929a973272c5661325a80f77b90_JC.exe

File Explorer

NEAS.05664929a973272c5661325a80f77b90_JC.exe

.dll 260KB

NEAS.05664929a973272c5661325a80f77b90_JC.exe

IMPHASH 6124aae42a2d35c57454a004d9731c77
SHA256 117ce44e32095df219483872d4df7c6f13f62aee848779152d294857dcc53e82
MD5 05664929a973272c5661325a80f77b90
SHA1 9c7e1deb30f16cae66b42e385a815bfb62ec3611
SHA512 7916851648055b89dd0245e67518d7e6936dca53d7206a4e0a9aeec33494be616b8b93433fa01e608211ca7df28e07baf0dfcc5a2f925d1176dd374ce5d7d1f2
SSDEEP 3072:lV5J7ftwoflUgXeenxV6FUhRlugpJ+oUfgYE5G+aWqQffCFFZn156JKrdI3ams7O:b7fapZ4Oef+NE5HnKF4KrdI3amWgJ
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

192512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcatA GetProcAddress HeapDestroy DeleteCriticalSection GetShortPathNameA InitializeCriticalSection DisableThreadLibraryCalls lstrcmpiA GetModuleFileNameA GetCurrentProcess FlushInstructionCache InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetModuleHandleA lstrcpyA GlobalUnlock GlobalFree GlobalAlloc GlobalLock GetTickCount FindResourceA LoadResource LockResource FreeResource LoadLibraryA FreeLibrary CreateFileA GetFileSize ReadFile EnterCriticalSection lstrlenA GetFileAttributesA GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr SetUnhandledExceptionFilter IsBadWritePtr VirtualAlloc WriteFile VirtualFree HeapCreate GetVersionExA GetEnvironmentVariableA GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStartupInfoA GetFileType GetStdHandle SetHandleCount LCMapStringW LCMapStringA GetOEMCP GetACP GetCPInfo HeapSize HeapReAlloc SetLastError GetLastError HeapAlloc CloseHandle ExitProcess TlsFree TlsAlloc TlsGetValue RaiseException HeapFree TlsSetValue GetCommandLineA RtlUnwind GetVersion Sleep InterlockedExchange SetStdHandle SetFilePointer FlushFileBuffers TerminateProcess LeaveCriticalSection lstrlenW WideCharToMultiByte MultiByteToWideChar

user32

CreateWindowExA IsWindow ReleaseDC wsprintfA GetDC ScreenToClient FillRect GetClientRect GetDlgItem GetWindowRect GetSysColor SetWindowLongA MoveWindow SetWindowPos ReleaseCapture GetWindowLongA SetWindowTextA SetCapture SetCursor LoadCursorA IsIconic GetDesktopWindow DestroyWindow LoadIconA SetWindowRgn ShowWindow GetWindowTextA DefWindowProcA CallWindowProcA GetWindowTextLengthA RegisterClassExA GetClassInfoExA AppendMenuA LoadStringA RemoveMenu GetSystemMenu DialogBoxParamA InvalidateRect GetParent SetDlgItemTextA OffsetRect CopyRect DrawTextA GetDlgCtrlID GetDlgItemTextA EnumChildWindows IntersectRect CharNextA GetClassNameA EnableWindow MessageBeep BeginPaint EndPaint SendMessageA UpdateWindow GetWindow SystemParametersInfoA MapWindowPoints CreateDialogIndirectParamA ClientToScreen SetFocus

gdi32

StretchBlt DeleteDC GetStockObject Rectangle DeleteMetaFile DeleteObject SetMetaFileBitsEx CreateDIBitmap RealizePalette SelectPalette SelectClipRgn CreateRectRgn CreatePatternBrush SetPixel PatBlt RestoreDC PlayMetaFile CreateBitmap SetBkColor CreateSolidBrush GetObjectA CreateCompatibleBitmap BitBlt SelectObject SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx SetMapMode UnrealizeObject CreateCompatibleDC SaveDC GetDeviceCaps CreatePalette EnumFontFamiliesExA GetTextExtentPoint32A GetSystemPaletteEntries CreateFontIndirectA SetBkMode SetTextColor TextOutA

advapi32

RegEnumKeyExA RegDeleteKeyA RegOpenKeyExA RegCreateKeyExA RegCloseKey RegSetValueExA

ole32

StringFromCLSID CoTaskMemFree CoCreateInstance

oleaut32

RegisterTypeLi LoadRegTypeLi SysAllocStringLen LoadTypeLi SysReAllocStringLen SysAllocString SysFreeString SysStringLen

winmm

sndPlaySoundA mciSendCommandA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

Name

.text

Size

96KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

40KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE