NEAS[.]27d11efee546bfe452a09209bcb3fd50_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.27d11efee546bfe452a09209bcb3fd50_JC.exe
Size

228KB
MD5

27d11efee546bfe452a09209bcb3fd50
SHA1

32319e09e95a2b56d6dbec69d4032f8a015e8385
SHA256

aff2a55a2466986c03229b68d08ded92dca5c959c4ed923436f0bcb98295bc93
SHA512

2a20a24d671756b5db90f23b73b6215ded1bbf45bab6df36d1c9334b190dd3d0563da1cf2bc437d7f6dd668c3603f1e5ce7505f7c8fe57f41f98cbae6b1f665f
SSDEEP

3072:QAbGWQGq9XZEPHALBQzbN8uN7Bg70vwYJp3FUPcFVBTBftbAg0Fu6yty1lUZuH5B:vbJqXLuzh8Y1C0ogpGcFVBTBlbAOXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.27d11efee546bfe452a09209bcb3fd50_JC.exe

Files

NEAS.27d11efee546bfe452a09209bcb3fd50_JC.exe
.exe windows:4 windows x86

e736773754d65240454d8e70cdf09487

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
SetEndOfFile
GlobalFree
GlobalAlloc
GetCommandLineA
GetModuleHandleA
SetStdHandle
IsBadCodePtr
GetLastError
ExitProcess
GetCurrentThreadId
GetModuleFileNameA
GetSystemInfo
GetTickCount
FindClose
FindFirstFileA
CloseHandle
CreateFileA
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
FreeLibrary
WaitForSingleObject
InterlockedIncrement
InterlockedExchange
Sleep
QueryPerformanceCounter
GetCurrentProcess
FlushFileBuffers
WriteFile
FreeConsole
GetStdHandle
AllocConsole
WriteConsoleA
ReadFile
GetLocalTime
InterlockedDecrement
RtlUnwind
RaiseException
GetStartupInfoA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetCurrentProcessId
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetACP
GetOEMCP
VirtualProtect
VirtualQuery
SetFilePointer
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr

user32

PostMessageA
IsWindow
PeekMessageA
GetClientRect
MessageBoxA
IsWindowUnicode
SetRect
GetParent
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
BringWindowToTop
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
LoadBitmapA
GetWindowThreadProcessId
PostThreadMessageA
CreateWindowExA
GetSystemMetrics
AdjustWindowRect
RegisterClassExA
LoadCursorA
LoadIconA

gdi32

CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC

ole32

CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemAlloc

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayDestroy
SysAllocStringLen
SafeArrayCreate

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e736773754d65240454d8e70cdf09487

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

Sections

.text Size: 144KB - Virtual size: 141KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 8KB - Virtual size: 17KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 144KB - Virtual size: 141KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 8KB - Virtual size: 17KB

.rsrc
Size: 8KB - Virtual size: 7KB