General

Malware Config

Signatures

Files

• NEAS.1c281fb0a0d1b95f9cf3be609757c990_JC.exe

  .exe windows:5 windows x86

  802db2b693e23b594e5f02f63ef92ced

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStartupInfoW

  HeapAlloc

  GetSystemTimeAsFileTime

  HeapFree

  RtlUnwind

  RaiseException

  HeapReAlloc

  Sleep

  ExitProcess

  HeapSize

  SetUnhandledExceptionFilter

  GetStdHandle

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  HeapCreate

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  TerminateProcess

  IsDebuggerPresent

  VirtualAlloc

  InitializeCriticalSectionAndSpinCount

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetUserDefaultLCID

  EnumSystemLocalesA

  IsValidLocale

  GetStringTypeA

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CreateFileA

  SetErrorMode

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  InterlockedIncrement

  GlobalFlags

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  LocalAlloc

  InterlockedDecrement

  CloseHandle

  WritePrivateProfileStringW

  GetCurrentThread

  ConvertDefaultLocale

  EnumResourceLanguagesW

  GetLocaleInfoW

  InterlockedExchange

  lstrlenA

  lstrcmpA

  GetCurrentProcessId

  GetModuleFileNameW

  GetModuleHandleA

  GlobalFree

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  WideCharToMultiByte

  lstrlenW

  GetCurrentThreadId

  GlobalAddAtomW

  GlobalFindAtomW

  GlobalDeleteAtom

  LoadLibraryA

  GetLastError

  SetLastError

  lstrcmpW

  MultiByteToWideChar

  GetModuleHandleW

  GetVersionExA

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetCurrentProcess

  GetProcAddress

  GetModuleHandleExA

  LocalFree

  FormatMessageW

  FreeLibrary

  LoadLibraryW

  UnhandledExceptionFilter

  user32

  IsWindowEnabled

  ShowWindow

  SetWindowTextW

  RegisterWindowMessageW

  WinHelpW

  GetCapture

  SetWindowsHookExW

  CallNextHookEx

  GetClassLongW

  GetClassNameW

  SetPropW

  GetPropW

  RemovePropW

  GetFocus

  GetWindowTextW

  GetForegroundWindow

  GetLastActivePopup

  DispatchMessageW

  GetDlgItem

  GetTopWindow

  DestroyWindow

  UnhookWindowsHookEx

  GetMessageTime

  GetMessagePos

  PeekMessageW

  MapWindowPoints

  GetKeyState

  SetMenu

  SetForegroundWindow

  IsWindowVisible

  PostMessageW

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  MessageBoxW

  CreateWindowExW

  GetClassInfoExW

  GetClassInfoW

  RegisterClassW

  AdjustWindowRectEx

  CopyRect

  GetDlgCtrlID

  DefWindowProcW

  CallWindowProcW

  GetMenu

  GetWindowLongW

  SetWindowPos

  SystemParametersInfoA

  GetWindowPlacement

  GetWindow

  GetSystemMetrics

  IsIconic

  LoadIconW

  EnableWindow

  SendMessageW

  SetCursor

  PtInRect

  GetCursorPos

  LoadCursorW

  ReleaseDC

  GetDC

  GetParent

  GetWindowRect

  GetSysColor

  IsWindow

  UnregisterClassW

  SetWindowLongW

  GetClientRect

  GetSysColorBrush

  DestroyMenu

  GetMessageW

  TranslateMessage

  ValidateRect

  GetActiveWindow

  PostQuitMessage

  GetWindowThreadProcessId

  ClientToScreen

  GrayStringW

  DrawTextExW

  DrawTextW

  TabbedTextOutW

  SetMenuItemBitmaps

  GetMenuCheckMarkDimensions

  LoadBitmapW

  ModifyMenuW

  GetMenuState

  EnableMenuItem

  CheckMenuItem

  gdi32

  DeleteObject

  PtVisible

  RectVisible

  TextOutW

  ExtTextOutW

  Escape

  SelectObject

  SetViewportOrgEx

  OffsetViewportOrgEx

  SetViewportExtEx

  ScaleViewportExtEx

  SetWindowExtEx

  DeleteDC

  SetMapMode

  RestoreDC

  SaveDC

  SetBkColor

  GetDeviceCaps

  ScaleWindowExtEx

  GetStockObject

  SetTextColor

  GetClipBox

  CreateBitmap

  winspool.drv

  DocumentPropertiesW

  OpenPrinterW

  ClosePrinter

  advapi32

  RegSetValueExW

  RegOpenKeyW

  RegEnumKeyW

  RegDeleteKeyW

  RegOpenKeyExW

  RegCreateKeyExW

  RegQueryValueExW

  RegCloseKey

  RegQueryValueW

  shlwapi

  PathFindFileNameW

  PathFindExtensionW

  oleaut32

  VariantInit

  VariantChangeType

  VariantClear

  Sections

  .text

  Size: 149KB - Virtual size: 148KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 37KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 134KB - Virtual size: 133KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 30KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ