NEAS[.]f235f2aac6c48f9423b1b7f308f8b450_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f235f2aac6c48f9423b1b7f308f8b450_JC.exe
Size

17KB
MD5

f235f2aac6c48f9423b1b7f308f8b450
SHA1

847b878d0c697aabf1622dd73e3881c1beecdca7
SHA256

59cd8e6a4db425c74733e9b0fd24f8d67865e4413272c6f8ac2be8cd9cffd396
SHA512

e7663bd2094d94a39ad7de306b98f0c10c5aefdfed7d029a41025c9d85079fd1b7b2c774ba949e979ec2cc5739c385ad52aaf091d1729a00d3e95abb75b04349
SSDEEP

384:GHkVVYgEJ/o5JZcyS7XiVQaSSbdmJCO5dQjUNrVTmt/ArfAKBqzaLUGLGh03C6:LwDJw53S7S6VSaTIUNrwtWsGAoGi7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f235f2aac6c48f9423b1b7f308f8b450_JC.exe

Files

NEAS.f235f2aac6c48f9423b1b7f308f8b450_JC.exe
.exe windows:1 windows x86

942a093bc913b02030965120bd1b655d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
OpenSCManagerA
CreateServiceA
StartServiceA
ControlService
DeleteService
CloseServiceHandle
RegDeleteValueA
OpenServiceA
QueryServiceStatus
GetUserNameA
RegCreateKeyExA

kernel32

MoveFileA
GetLocalTime
SetUnhandledExceptionFilter
FreeLibrary
lstrlen
GetWindowsDirectoryA
GetStartupInfoA
lstrcmp
GetFileAttributesA
lstrcat
CreateProcessA
lstrcpy
GetSystemDirectoryA
GetTickCount
CopyFileA
DeviceIoControl
SetFileAttributesA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetLastError
ExitProcess
SetCurrentDirectoryA
WriteFile
GetVersionExA
LoadLibraryA
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetFileSize
GetModuleFileNameA
GetCommandLineA
LocalAlloc
LocalFree
GetCurrentThread
GetCurrentThreadId
CreateFileA
ReadFile
CloseHandle
Sleep
GetSystemTime

user32

GetSystemMetrics
CharLowerA
SendMessageA
SetWindowsHookExA
SetKeyboardState
ToAscii
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
UpdateWindow
ValidateRect
GetCursorPos
WindowFromPoint
GetWindowTextA
CallNextHookEx
RegisterSystemThread
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
DefWindowProcA
PostQuitMessage
SetCursor
ExitWindowsEx

gdi32

CreateDIBSection
CreatePalette
DeleteObject
RealizePalette
SelectPalette
CreateDCA
DeleteDC
SelectObject
CreateCompatibleDC
SetPixel
BitBlt
GetStockObject

ntdll

NtQuerySystemInformation
RtlAnsiStringToUnicodeString
ZwDeleteFile

wsock32

WSAAsyncSelect
getpeername
inet_addr
bind
connect
ioctlsocket
recv
send
WSACleanup
closesocket
WSAStartup
socket
WSAGetLastError
WSACancelBlockingCall
WSAUnhookBlockingHook
WSASetBlockingHook
gethostbyname

wininet

InternetGetConnectedState
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
FtpPutFileA
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache

Sections

code
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

relocs
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

resource
Size: 924B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

942a093bc913b02030965120bd1b655d

Headers

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

ntdll

wsock32

wininet

Sections

code Size: 8KB - Virtual size: 12KB

data Size: 1KB - Virtual size: 4KB

bss Size: - Virtual size: 20KB

imports Size: 3KB - Virtual size: 4KB

relocs Size: 1KB - Virtual size: 4KB

resource Size: 924B - Virtual size: 4KB

code
Size: 8KB - Virtual size: 12KB

data
Size: 1KB - Virtual size: 4KB

bss
Size: - Virtual size: 20KB

imports
Size: 3KB - Virtual size: 4KB

relocs
Size: 1KB - Virtual size: 4KB

resource
Size: 924B - Virtual size: 4KB