NEAS[.]0b4cc74ccaa765f29232166c1b74c030_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b4cc74ccaa765f29232166c1b74c030_JC.exe
Size

464KB
MD5

0b4cc74ccaa765f29232166c1b74c030
SHA1

de42e49e00919c755fda0836f1245246e5792376
SHA256

6f6745e9848c35569d091f78b3e8e95a0e01038d82d9c43603b56e30c4cc40f3
SHA512

e5067689d5dc0ddf557e63eb0df92fb23525860dad559d771340e4137d8e525968526b88bff278a810d8210e6d47046935a29213508bf675bed3692dca1930bb
SSDEEP

6144:CvdsCcwIFg5X91aS7NOse2ekY/8d8FNKnb8cJoPqHxyRVLhJhbETgCzGTcFykS:Odsunp0se2dY/dKb3A7d/KgCT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b4cc74ccaa765f29232166c1b74c030_JC.exe

Files

NEAS.0b4cc74ccaa765f29232166c1b74c030_JC.exe
.exe windows:4 windows x86

87b56cda83ee6f35cdb481250a566ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapReAlloc
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
SetStdHandle
GetFileType
ExitProcess
HeapSize
Sleep
GetStdHandle
GetACP
IsValidCodePage
GetDateFormatA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetTimeFormatA
GetSystemTimeAsFileTime
SetErrorMode
GetOEMCP
GetCPInfo
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CloseHandle
lstrcmpA
GetProfileIntA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
GlobalFree
CopyFileA
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentProcessId
GetModuleFileNameA
GetTickCount
lstrlenW
CompareStringA
lstrlenA
GetVersion
MultiByteToWideChar
CompareStringW
InterlockedExchange
GetLocalTime
MulDiv
GlobalUnlock
GetVersionExA
GlobalLock
GlobalSize
GlobalReAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeA
WideCharToMultiByte

user32

CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterClipboardFormatA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
SystemParametersInfoA
GetDC
ReleaseDC
SendMessageA
DrawTextA
SetCursor
LoadCursorA
CopyRect
IsWindowVisible
IsRectEmpty
GetDoubleClickTime
WindowFromPoint
ClientToScreen
CharUpperA
IsIconic
AppendMenuA
GetSystemMenu
LoadIconA
GetSubMenu
PostThreadMessageA
UnregisterClassA
LoadMenuA
DrawIcon
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
FillRect
SetRect
FrameRect
DrawEdge
InflateRect
GetSysColor
ReleaseCapture
GetKeyState
GetWindowRect
KillTimer
GetParent
GetCursorPos
ScreenToClient
GetFocus
GetClientRect
PostMessageA
PtInRect
IsClipboardFormatAvailable
InvertRect
GetSystemMetrics
TabbedTextOutA
InvalidateRect
SetCapture
GetMessagePos
DrawTextExA
IsWindow
ClipCursor
GrayStringA
SetTimer
EnableWindow
GetClassInfoA
IntersectRect
GetCapture
DefWindowProcA
GetWindowTextA

gdi32

ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
SetViewportExtEx
CreateSolidBrush
CopyMetaFileA
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetWindowExtEx
GetViewportExtEx
DeleteObject
CreateFontIndirectA
MoveToEx
LineTo
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
PatBlt
GetTextMetricsA
Escape
CreateFontA
CreatePen
GetObjectA
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
GetBkColor
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetCurrentObject
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleSetClipboard
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SystemTimeToVariantTime
VarUdateFromDate
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime

Sections

.text
Size: 356KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87b56cda83ee6f35cdb481250a566ac2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 356KB - Virtual size: 353KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 356KB - Virtual size: 353KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 20KB - Virtual size: 16KB