NEAS[.]3c139ca6455da25d2aeb1f684a1f70a0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3c139ca6455da25d2aeb1f684a1f70a0_JC.exe
Size

2.2MB
MD5

3c139ca6455da25d2aeb1f684a1f70a0
SHA1

57192b808f9ad9f6f3e5ee3b8e5d3335196afc06
SHA256

8af9d9bdc7aa6d8af1c2ba7e3137a2b23b4947d432883a2ee78f73fb8ff3f6ba
SHA512

9727838987ce8b4a249e709b6d95bc85d8638abe7bdf4a9174ec172bd49121f1d987366e43f587a975614e5e6d1f432d5dba7a8b2fb1f0e120e7ce1f6ac00ba1
SSDEEP

24576:7rytN80FULYJ53N8rvksh7ej8d5qbqI1Y3qJZ3V98pzL20XMXQsnO+nvV6d/wp4S:7tExy7xHn8fNMbT5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3c139ca6455da25d2aeb1f684a1f70a0_JC.exe

Files

NEAS.3c139ca6455da25d2aeb1f684a1f70a0_JC.exe
.exe windows:4 windows x86

6fe181bbe62283a9142f5a4d472b11e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecA
SHAutoComplete

winmm

waveOutGetNumDevs
PlaySoundA
sndPlaySoundA
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveOutPrepareHeader
waveOutOpen

kernel32

GetProfileIntA
GetProfileStringA
GetCurrentDirectoryA
CompareStringW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetACP
ExitThread
TerminateProcess
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
CompareStringA
GetTempPathA
GetPrivateProfileSectionNamesA
GetExitCodeThread
ResetEvent
GetVersionExA
GetLocalTime
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateEventA
CloseHandle
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
MulDiv
SetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
SetThreadPriority
lstrcmpA
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FormatMessageA
WideCharToMultiByte
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
LocalSize
GetVersion
GlobalSize
GlobalFree
InterlockedExchange
GetSystemDirectoryA
MultiByteToWideChar
FreeLibrary
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CancelIo
GetProcAddress
TerminateThread
GetTickCount
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateDirectoryA
GetLastError
MoveFileA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
SetUnhandledExceptionFilter
GetModuleFileNameA
lstrcpyA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
ReadFile
CopyFileA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
SetFilePointer
lstrlenA
WriteFile
DeleteFileA
VirtualAlloc
VirtualFree
Sleep
CreateThread
ResumeThread
SetEvent
SetEnvironmentVariableA
WaitForSingleObject
SetHandleCount

user32

InvertRect
GetNextDlgGroupItem
CopyAcceleratorTableA
DestroyIcon
GetMenuStringA
InsertMenuA
GetSysColorBrush
EnableWindow
RegisterWindowMessageA
SetRect
PostMessageA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
PostThreadMessageA
FindWindowA
MessageBoxA
wsprintfA
UpdateWindow
GetWindow
GetClientRect
SetCapture
LoadCursorA
SetCursor
ScreenToClient
WindowFromPoint
ClientToScreen
ReleaseCapture
GetParent
IsWindowVisible
SetWindowPos
GetDlgCtrlID
GetFocus
GetCursorPos
EnableMenuItem
GetMenuItemCount
DeleteMenu
GetSubMenu
CharNextA
LoadMenuA
OffsetRect
GetSystemMetrics
InflateRect
SendMessageA
LoadIconA
GetClassNameA
KillTimer
SetTimer
FillRect
IsRectEmpty
SetParent
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
LoadStringA
PtInRect
IsZoomed
GetMessageA
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
InvalidateRect
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
ShowWindow
MessageBeep
CheckMenuItem
AppendMenuA
GetSystemMenu
LoadImageA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
UnregisterClassA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetClipboardFormatNameA
GetTabbedTextExtentA
SendMessageTimeoutA
IsWindowUnicode
GetWindowLongW
SetWindowLongW
DrawEdge
GetDoubleClickTime
GetWindowRgn
HideCaret
ShowCaret
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
UnionRect
SetCursorPos
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
TranslateMessage
DispatchMessageA
BringWindowToTop
SetWindowRgn
GetCursor
GetMenuStringW
LookupIconIdFromDirectoryEx
CopyIcon
CreateIconIndirect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetKeyState
GetWindowLongA
SetWindowLongA
GetClipboardData
DrawTextA
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
GetWindowRect
CheckMenuRadioItem
GetIconInfo
SetClassLongA
DestroyCursor
LoadBitmapA
RedrawWindow
GetDesktopWindow
GetDC
ReleaseDC
GetSysColor
DrawStateA
DrawFocusRect
CreatePopupMenu
SetMenuDefaultItem
EnumChildWindows
DrawAnimatedRects
MapVirtualKeyA
WaitMessage
DrawFrameControl
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
GetKeyboardLayout
ToAsciiEx
GetKeyboardState
GetKeyboardLayoutList
IsClipboardFormatAvailable
CreateIconFromResourceEx

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
ExtTextOutA
StretchDIBits
CreateDIBSection
SelectObject
DeleteObject
GetTextExtentPoint32A
CreateCompatibleDC
CreateCompatibleBitmap
GetPixel
SetPixelV
BitBlt
GetObjectA
TextOutA
SetBkMode
GetClipBox
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetTextMetricsA
DeleteDC
GetCharWidthA
CreateFontA
LineTo
SetTextAlign
GetCurrentPositionEx
PolyBezierTo
GetClipRgn
CreateRectRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
SetRectRgn
CombineRgn
CreateFontIndirectA
DPtoLP
SaveDC
RestoreDC
GetStockObject
SetStretchBltMode
SetMapMode
LPtoDP
CopyMetaFileA
GetTextColor
GetBkColor
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
Polygon
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
CreateDIBitmap
GetTextExtentPointA
ExtFloodFill
ExtTextOutW
GetTextExtentPoint32W
BeginPath
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
GetViewportOrgEx
Polyline
PtInRegion
RoundRect
CreatePolygonRgn
GetRgnBox
ExtCreateRegion
GetBitmapBits
EnumFontFamiliesExA
GetDIBits
GetTextAlign
StretchBlt
GetCurrentObject
SetPixel
GetWindowOrgEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegEnumKeyA

shell32

DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetFileInfoA
Shell_NotifyIconA
SHAppBarMessage
SHGetMalloc
ord71
ShellExecuteA
ExtractIconA

comctl32

ImageList_Remove
ImageList_Draw
ImageList_GetImageInfo
ImageList_Add
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetIcon
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon

oledlg

ord1
ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoFreeUnusedLibraries
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoUninitialize

olepro32

ord253

oleaut32

VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SysAllocString
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
OleLoadPicturePath
VariantChangeTypeEx
SafeArrayUnaccessData

ws2_32

__WSAFDIsSet
send
WSACloseEvent
WSASend
WSARecv
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
socket
ioctlsocket
htons
connect
select
WSAStartup
gethostname
gethostbyname
WSACleanup
closesocket
getpeername
inet_ntoa
getsockname
ntohs
recv

pdh

PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery

avifil32

AVIFileInit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIStreamRelease
AVIFileExit

msvfw32

DrawDibDraw
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose

skinh

SkinH_AttachRes
SkinH_SetAero

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fe181bbe62283a9142f5a4d472b11e3

Headers

File Characteristics

Imports

shlwapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

pdh

avifil32

msvfw32

skinh

wininet

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 248KB - Virtual size: 245KB

.data Size: 92KB - Virtual size: 112KB

.rsrc Size: 408KB - Virtual size: 408KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 248KB - Virtual size: 245KB

.data
Size: 92KB - Virtual size: 112KB

.rsrc
Size: 408KB - Virtual size: 408KB