NEAS[.]16345b3df8b41cf69c6159d9e3837910_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.16345b3df8b41cf69c6159d9e3837910_JC.exe
Size

63KB
MD5

16345b3df8b41cf69c6159d9e3837910
SHA1

7de9b5a6d41bc39591be89dd62825ad93da61856
SHA256

45dff169634c229d023cb1c0abc6c2b510a709e499c15ebec444c0ec57a11d57
SHA512

40208971dc858a3a2dd2393e469f2fa0ec5de81337474f7b8d68409e966e282ca157caf2e18d3a3d626cb992cf8e1bc31ecd29080c8e252f8898f5b52e30257c
SSDEEP

768:xW0njZqEDemx0qU2cQ6bCoNRk7dWh7sHJkk014XvltLZlyQlNjEbWaG:xjpeS0Y6NNR+vHJkk014/bz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.16345b3df8b41cf69c6159d9e3837910_JC.exe

Files

NEAS.16345b3df8b41cf69c6159d9e3837910_JC.exe
.exe windows:6 windows x64

d04d606a5f2fa0a69cd5c8ffebc64ed3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
Sleep

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
terminate
_initialize_onexit_table
_execute_onexit_table
_register_onexit_function
_cexit
_initialize_narrow_environment
_configure_narrow_argv
abort
_seh_filter_dll

vcruntime140

__FrameUnwindFilter
memset
__current_exception_context
memcpy
__current_exception
__C_specific_handler

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d04d606a5f2fa0a69cd5c8ffebc64ed3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

mscoree

Sections

.text Size: 9KB - Virtual size: 9KB

.nep Size: 1KB - Virtual size: 1KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 1KB - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 384B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 44B

.text
Size: 9KB - Virtual size: 9KB

.nep
Size: 1KB - Virtual size: 1KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 1KB - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 384B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 44B