NEAS[.]1604ee6746ee85b1a76b094d91b986b0_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.1604ee6746ee85b1a76b094d91b986b0_JC.exe
Size

688KB
MD5

1604ee6746ee85b1a76b094d91b986b0
SHA1

7baa67419b76460115543ed40e76e5d9fc11b583
SHA256

caeb0e5dcaad819992c3edca6dfed4c1b9dc14ce48ac0f818a23eff25bc99911
SHA512

f91a76ae663365229b0c5810c3ef666d45cf366c7e6440ea5b50bbb986b368ad6d2daad817a0ec0592560bdb47be9f615085ef25380fa0faeb8d428cf1cd0612
SSDEEP

12288:wsaRaMgTJz1prppJqCankRJ0c16Hc0ZIKUJ7IRdwhSNL3q1hVSt2:wkFlzDpHqCankRJd8HfZIvIweL3qU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1604ee6746ee85b1a76b094d91b986b0_JC.exe

Files

NEAS.1604ee6746ee85b1a76b094d91b986b0_JC.exe
.dll windows:6 windows x86

8424b4198fad9e20c640a91fe29ba955

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winhttp

WinHttpConnect
WinHttpCloseHandle
WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest

opengl32

wglGetCurrentDC

user32

GetSystemMetrics
SendInput
SetWindowsHookExA
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetMessageExtraInfo
TrackMouseEvent
UnhookWindowsHookEx
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetWindowThreadProcessId
EnumWindows
WindowFromDC
GetAsyncKeyState
CallNextHookEx
EmptyClipboard

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
DecodePointer
LCMapStringW
GetFileType
GetStdHandle
HeapFree
HeapAlloc
ReadFile
ExitProcess
GetModuleFileNameW
WideCharToMultiByte
K32QueryWorkingSetEx
VirtualAlloc
VirtualProtect
CloseHandle
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsProcessorFeaturePresent
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
VirtualQuery
GetProcessHeap
CreateThread
GetCurrentThreadId
Sleep
GetCurrentProcess
GetCurrentProcessId
VirtualFree
FreeLibrary
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetModuleHandleExW
GetStringTypeW
SetStdHandle
CreateFileW
HeapReAlloc
HeapSize
SetEndOfFile
WriteConsoleW
GetModuleHandleW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

Sections

.text
Size: 428KB - Virtual size: 427KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8424b4198fad9e20c640a91fe29ba955

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

opengl32

user32

kernel32

imm32

Sections

.text Size: 428KB - Virtual size: 427KB

.rdata Size: 238KB - Virtual size: 238KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 17KB - Virtual size: 16KB

.text
Size: 428KB - Virtual size: 427KB

.rdata
Size: 238KB - Virtual size: 238KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 17KB - Virtual size: 16KB