NEAS[.]28cc991578c24a3c56af49a28086b4823d6ad6cd9508affc002c29ed067f63c5exe_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.28cc991578c24a3c56af49a28086b4823d6ad6cd9508affc002c29ed067f63c5exe_JC.exe
Size

542KB
MD5

9ca9d05db57e8ed57fe67394cb0d03c1
SHA1

1dea3afd6a2a1fb6ca95220a71963e16624096fe
SHA256

28cc991578c24a3c56af49a28086b4823d6ad6cd9508affc002c29ed067f63c5
SHA512

6b6240e894da3e6f2192e40e8932ca48ef8d9121209479752ded6b971b161e1cd67231de67608034d3721fdcaad78b6cc36c3fbf6101d1ff00b1f042062efe88
SSDEEP

12288:jf74h6tySv4oCR9mjWAXKBpM7u+osldDt8H9E+ENRL:b745SQo4IWAX+ImH9E+gR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.28cc991578c24a3c56af49a28086b4823d6ad6cd9508affc002c29ed067f63c5exe_JC.exe

Files

NEAS.28cc991578c24a3c56af49a28086b4823d6ad6cd9508affc002c29ed067f63c5exe_JC.exe
.exe windows:5 windows x86

b70216cec1f529207c6e03e72ed93366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetLastError
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
CreateFileW
GetDriveTypeW
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
GetModuleHandleA
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
HeapReAlloc
GetConsoleCP
GetConsoleMode
GetStringTypeW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
SetStdHandle
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetFilePointerEx
WriteConsoleW
FlushFileBuffers
GetTimeZoneInformation
HeapSize
SetEndOfFile
ReadFile
ReadConsoleW
EncodePointer
DecodePointer
RaiseException
GetDateFormatW
GetProcAddress

advapi32

SystemFunction036

Sections

.text
Size: 455KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b70216cec1f529207c6e03e72ed93366

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 455KB - Virtual size: 454KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 51KB - Virtual size: 116KB

.text
Size: 455KB - Virtual size: 454KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 51KB - Virtual size: 116KB