NEAS[.]3128019070ca4d13af7322a1f9e2cf10_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3128019070ca4d13af7322a1f9e2cf10_JC.exe
Size

2.1MB
MD5

3128019070ca4d13af7322a1f9e2cf10
SHA1

b55d6ac2fc8122f4fe7943110b9352d6f97f24ed
SHA256

99c7e3a036b6668cfec3e020af109722994c14357de31416e7955807e8d77eba
SHA512

7cbd2dc37c4b197eecca6919b04e18b42ad8cf2243e28856e3dcc883e90f9b65c7dfa20da3bd4ec861c88552b0d42330b8600db9351287d8088a33fd30584865
SSDEEP

49152:8tmcypIgocOgktSuvfSnQDrH9KvGvNWfTLQpQgriV:jQgnOgSS2SnErHOGVkTLQvriV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3128019070ca4d13af7322a1f9e2cf10_JC.exe

Files

NEAS.3128019070ca4d13af7322a1f9e2cf10_JC.exe
.exe windows:4 windows x86

c10380cffe747505ddd05a3ca6135175

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetWindowsDirectoryA
CloseHandle
WinExec
WritePrivateProfileStringA
SetFileAttributesA
GetFileAttributesA
CreateFileA
WriteFile
GetTempFileNameA
GetFileSize
FindClose
FindFirstFileA
GetExitCodeProcess
WaitForSingleObject
OpenProcess
GetEnvironmentVariableA
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryA
GetCurrentProcess
LocalFree
LocalAlloc
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
SetFilePointer
OutputDebugStringA
DeleteFileA
MoveFileA
ReadFile
MoveFileExA
CreateProcessA
FreeLibrary
GetLastError
GetShortPathNameA
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
GetVersionExA
EnterCriticalSection
GetCPInfo
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
LeaveCriticalSection
RtlUnwind
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetCurrentThreadId
GetFileType
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetLastError
TlsGetValue
TlsSetValue
TlsAlloc

user32

SystemParametersInfoA
MessageBoxA
wsprintfA
ExitWindowsEx

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegFlushKey
RegCloseKey
RegSetValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

LoadTypeLi
RegisterTypeLi

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c10380cffe747505ddd05a3ca6135175

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

version

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 24KB - Virtual size: 24KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 28KB - Virtual size: 27KB