NEAS[.]8941fa57240caf8fa9994a14da2c9640_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8941fa57240caf8fa9994a14da2c9640_JC.exe
Size

148KB
MD5

8941fa57240caf8fa9994a14da2c9640
SHA1

819945dccaefe3dc5c7db700569e53aaf2913abd
SHA256

7efae49efaa6170e804b129f7905f25c4b467b477b5028442ae0eac643cdb255
SHA512

c630a8d40ae7e0fcad98c7c5fb9b5c7c23d447f08d49710a941b44b406ba851de519eb5ba04e3887a6ace8d941e704a46275c9f1585aa92e93c735d6fa3ada6a
SSDEEP

3072:i1+wn0I5WUtYUjbUmzi4b49Ca/cpC83woivrY8U:ZTp/Czqf8gois8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8941fa57240caf8fa9994a14da2c9640_JC.exe

Files

NEAS.8941fa57240caf8fa9994a14da2c9640_JC.exe
.dll windows:5 windows x86

3cf3d4ffaf9b663c69478964bfc31811

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
FindClose
LocalAlloc
GetModuleFileNameA
FindNextFileA
GetLastError
CloseHandle
LocalFree
lstrcpyA
FindFirstFileA
lstrcatA
GetSystemDirectoryA
Sleep
WriteFile
SetFileTime
GetTickCount
GetCurrentProcess
lstrlenA
GetFileTime
CreateFileA
GetFileAttributesA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
HeapSize

user32

wsprintfA

advapi32

QueryServiceConfig2A
QueryServiceConfigA
RegEnumValueA
OpenSCManagerA
QueryServiceStatusEx
RegQueryInfoKeyA
RegOpenKeyExA
ChangeServiceConfigA
StartServiceA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
OpenServiceA
RegCloseKey

Exports

Exports

StartIns

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cf3d4ffaf9b663c69478964bfc31811

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 92KB - Virtual size: 116KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 92KB - Virtual size: 116KB

.reloc
Size: 4KB - Virtual size: 4KB