NEAS[.]157b9551ccc927f8b451dc63ee0fcb60_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.157b9551ccc927f8b451dc63ee0fcb60_JC.exe
Size

133KB
MD5

157b9551ccc927f8b451dc63ee0fcb60
SHA1

b1cafae439d58ac9f4af501c46ea2d727be0ad78
SHA256

91bbe8b5693a6bcd5783e89067036947fb209b2915bb47bc12212509d8906331
SHA512

4e08fffb31607432ca1fe2b480d6aa9d6d48cc46e86621121874c483f082041aaa32b79b4daed3ad1750e9252e3a885642b9810f5a30410b231c816566fb25aa
SSDEEP

1536:d+MloTG0qEEiWYUbY24ED1sEtyBrFkk099AeAXE6enjnatqTs:TC+YUbtvxOBrFkH99AeuEFjnatqTs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.157b9551ccc927f8b451dc63ee0fcb60_JC.exe

Files

NEAS.157b9551ccc927f8b451dc63ee0fcb60_JC.exe
.dll windows:4 windows x64

2d32666f68640ca77d463888c46a1351

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CancelIo
CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetThreadAffinityMask
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoA
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteFile

msvcrt

__dllonexit
__iob_func
_amsg_exit
_beginthreadex
_errno
_exit
_initterm
_lock
_onexit
_snprintf
_snwprintf
_stricmp
_strnicmp
_unlock
_vsnprintf
abort
atoi
calloc
fputs
free
fwprintf
fwrite
getenv
malloc
memcpy
memmove
memset
raise
realloc
signal
sprintf
sscanf
strcmp
strlen
strncmp
strtok
toupper
vfprintf
wcscpy

user32

MessageBoxW

Exports

Exports

GUID_DEVINTERFACE_LIBUSB0_FILTER
GUID_DEVINTERFACE_USB_DEVICE
GUID_DEVINTERFACE_USB_HOST_CONTROLLER
GUID_DEVINTERFACE_USB_HUB
INVALID_WINFD
_poll_fd
active_contexts_list
active_contexts_lock
api_hid_available
autoclaim_lock
composite_driver_names
discovered_devs_append
epoch_time
exit_polling
fd_to_winfd
handle_to_winfd
hid_driver_names
hires_frequency
hires_ticks_to_ps
htab_filled
htab_size
htab_table
htab_write_mutex
hub_driver_names
init_polling
is_polling_set
libusb_alloc_streams
libusb_alloc_transfer
libusb_attach_kernel_driver
libusb_bulk_transfer
libusb_cancel_transfer
libusb_claim_interface
libusb_clear_halt
libusb_close
libusb_control_transfer
libusb_detach_kernel_driver
libusb_error_name
libusb_event_handler_active
libusb_event_handling_ok
libusb_exit
libusb_free_bos_descriptor
libusb_free_config_descriptor
libusb_free_container_id_descriptor
libusb_free_device_list
libusb_free_pollfds
libusb_free_ss_endpoint_companion_descriptor
libusb_free_ss_usb_device_capability_descriptor
libusb_free_streams
libusb_free_transfer
libusb_free_usb_2_0_extension_descriptor
libusb_get_active_config_descriptor
libusb_get_bos_descriptor
libusb_get_bus_number
libusb_get_config_descriptor
libusb_get_config_descriptor_by_value
libusb_get_configuration
libusb_get_container_id_descriptor
libusb_get_device
libusb_get_device_address
libusb_get_device_descriptor
libusb_get_device_list
libusb_get_device_speed
libusb_get_max_iso_packet_size
libusb_get_max_packet_size
libusb_get_next_timeout
libusb_get_parent
libusb_get_pollfds
libusb_get_port_number
libusb_get_port_numbers
libusb_get_port_path
libusb_get_ss_endpoint_companion_descriptor
libusb_get_ss_usb_device_capability_descriptor
libusb_get_string_descriptor_ascii
libusb_get_usb_2_0_extension_descriptor
libusb_get_version
libusb_handle_events
libusb_handle_events_completed
libusb_handle_events_locked
libusb_handle_events_timeout
libusb_handle_events_timeout_completed
libusb_has_capability
libusb_hotplug_deregister_callback
libusb_hotplug_register_callback
libusb_init
libusb_interrupt_transfer
libusb_kernel_driver_active
libusb_lock_event_waiters
libusb_lock_events
libusb_open
libusb_open_device_with_vid_pid
libusb_pollfds_handle_timeouts
libusb_ref_device
libusb_release_interface
libusb_reset_device
libusb_set_auto_detach_kernel_driver
libusb_set_configuration
libusb_set_debug
libusb_set_interface_alt_setting
libusb_set_pollfd_notifiers
libusb_setlocale
libusb_strerror
libusb_submit_transfer
libusb_transfer_get_stream_id
libusb_transfer_set_stream_id
libusb_try_lock_events
libusb_unlock_event_waiters
libusb_unlock_events
libusb_unref_device
libusb_wait_for_event
overlapped_to_winfd
pipe_number
poll_fd
sub_api_name
timer_thread
timer_thread_id
usb_api_backend
usbi_add_pollfd
usbi_alloc_device
usbi_backend
usbi_clear_event
usbi_close
usbi_cond_broadcast
usbi_cond_destroy
usbi_cond_init
usbi_cond_signal
usbi_cond_timedwait
usbi_cond_wait
usbi_connect_device
usbi_create_fd
usbi_default_context
usbi_device_cache_descriptor
usbi_disconnect_device
usbi_free_fd
usbi_get_config_index_by_value
usbi_get_device_by_session_id
usbi_get_tid
usbi_handle_disconnect
usbi_handle_transfer_cancellation
usbi_handle_transfer_completion
usbi_hotplug_deregister_all
usbi_hotplug_match
usbi_hotplug_notification
usbi_io_exit
usbi_io_init
usbi_log
usbi_log_v
usbi_mutex_destroy
usbi_mutex_init
usbi_mutex_lock
usbi_mutex_static_lock
usbi_mutex_static_unlock
usbi_mutex_trylock
usbi_mutex_unlock
usbi_parse_descriptor
usbi_pipe
usbi_poll
usbi_read
usbi_remove_pollfd
usbi_sanitize_device
usbi_signal_event
usbi_signal_transfer_completion
usbi_write
windows_backend
windows_clock_gettime_threaded
windows_version
winusbx_driver_names

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d32666f68640ca77d463888c46a1351

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 82KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 28KB - Virtual size: 27KB

.pdata Size: 3KB - Virtual size: 3KB

.xdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 29KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 104B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 528B

.text
Size: 82KB - Virtual size: 82KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 28KB - Virtual size: 27KB

.pdata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 29KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 528B