NEAS[.]c653f0937020a9bf0d0d881f48f42b20_JC[.]exe

General

Target

NEAS.c653f0937020a9bf0d0d881f48f42b20_JC.exe
Size

35KB
MD5

c653f0937020a9bf0d0d881f48f42b20
SHA1

62fabd8e4bde5973abbdf343143da70667fa01e1
SHA256

9cc15e65451087374552e651efcc4a39dda23a6ed227d8e4f228a554a77b9673
SHA512

16a496669bc0f23096ff51dd9fbc7b5cb4bf727d2c15188adacea9af3d86322d11540c5e99ec59e09b225ffd485f6c3710655c884d5f6d2893e65a4708044fd1
SSDEEP

384:SJp8xADRYBoWazX5dpWyT3LLJjAh8gMv6Qm6GZ6soDpvEDHN50nuWdg1/4m7C3Nl:RsHWSLJUhjKFGZ6fEDtunl/3NAZA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c653f0937020a9bf0d0d881f48f42b20_JC.exe

Files

NEAS.c653f0937020a9bf0d0d881f48f42b20_JC.exe
.dll windows:5 windows x86

bfdb64334cfcd0618f42c193e0854a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ccs.exe

soc_insert_subcore
CCTDeleteCCInfo
CCTNewCCInfo
subcore_error
soc_select

kernel32

GetStartupInfoW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc

Exports

Exports

tzas

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfdb64334cfcd0618f42c193e0854a92

Headers

DLL Characteristics

File Characteristics

Imports

ccs.exe

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB