NEAS[.]33d5ce71aedf39c7d042dd5a84963870_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.33d5ce71aedf39c7d042dd5a84963870_JC.exe
Size

2.9MB
MD5

33d5ce71aedf39c7d042dd5a84963870
SHA1

f5ed27938739d43757a02526105c0113c1ddaa97
SHA256

1a37de4ac514817fee123fec3284e1fd7758a7a9cd6e0dfb745c1cb46522ad03
SHA512

997c5bf2bbf3b89526a182c0076aaffe9a4db9f856ceb06454183ebf2cdcca9905e61df1cdaf44b2d464e2c93bd9cb430535ef6944153600ac6a10087cbf23c3
SSDEEP

49152:nuU88sN8bq889IA/uJm0YAN08iHs1kdAGAoz1LuLqv9Ir7Yo69yYfc/FweYcFr:n18LNSa9IbJmOPShLTvKbII/BYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.33d5ce71aedf39c7d042dd5a84963870_JC.exe

Files

NEAS.33d5ce71aedf39c7d042dd5a84963870_JC.exe
.dll windows:5 windows x86

7245df591712297507d121ba79ad8c60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

ReplaceTextW

user32

GetUpdateRgn
ShowWindow
AllowSetForegroundWindow
MessageBoxIndirectW
ReuseDDElParam
CreateCaret
keybd_event

oleaut32

SysStringByteLen
GetErrorInfo

setupapi

SetupDiGetDeviceRegistryPropertyA

mprapi

MprConfigInterfaceDelete

gdi32

DeleteEnhMetaFile
GetNearestPaletteIndex
GetROP2
Arc

shlwapi

StrChrIW

rpcrt4

I_RpcAllocate
RpcRaiseException

advapi32

CloseEventLog
QueryServiceStatusEx
QueryServiceLockStatusW

comctl32

DestroyPropertySheetPage

version

VerQueryValueW

msvcrt

putc
memset

wininet

FindFirstUrlCacheGroup

kernel32

GetModuleHandleA
IsProcessorFeaturePresent
FillConsoleOutputAttribute
IsProcessInJob
DeleteTimerQueueTimer
GetSystemPowerStatus
GetModuleFileNameW
GetUserDefaultLCID
HeapDestroy
TerminateProcess
FindNextFileW

winscard

SCardListReadersA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZVqPQ
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7245df591712297507d121ba79ad8c60

Headers

File Characteristics

Imports

comdlg32

user32

oleaut32

setupapi

mprapi

gdi32

shlwapi

rpcrt4

advapi32

comctl32

version

msvcrt

wininet

kernel32

winscard

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 100KB - Virtual size: 99KB

ZVqPQ Size: 2.8MB - Virtual size: 2.8MB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 100KB - Virtual size: 99KB

ZVqPQ
Size: 2.8MB - Virtual size: 2.8MB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 12KB - Virtual size: 11KB