NEAS[.]04c4ca65f222464540afbf4c5a3b6600_JC[.]exe

General

Target

NEAS.04c4ca65f222464540afbf4c5a3b6600_JC.exe
Size

36KB
MD5

04c4ca65f222464540afbf4c5a3b6600
SHA1

f451ed956fc79911bc9664a5c2806b77ecfb0a48
SHA256

c9509d4e3f8f4cdadebd5e61642d0a13191084add0577f2d20c3ab0709c30fc7
SHA512

bbff7bb26a52b5fc571677e8726302a8cca52976d9bc3c4678e9f901e1134d197a3c2bf1df7fe8ab7094096b6c5ea2ddf0eb924d52925c4e1783eca95d0ec538
SSDEEP

768:Uxg/yHig7GeiKYolmNl+0lmltwPIj0spxKGZ2MdzP3mJ+:US/yHigaegSUlbMtwP/GKGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.04c4ca65f222464540afbf4c5a3b6600_JC.exe

Files

NEAS.04c4ca65f222464540afbf4c5a3b6600_JC.exe
.exe windows:4 windows x86

bcf1fef5f79203fe2b0eb0d2ed44bb58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetVolumeInformationA
GetDriveTypeA
GetLogicalDrives
DeleteFileA
SetFileAttributesA
MoveFileA
GetFileAttributesA
lstrcatA
lstrcpyA
Sleep
CopyFileA
CreateDirectoryA
WinExec
GetLocalTime
lstrcmpA
GetProcAddress
LoadLibraryA
CreateThread
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
GetEnvironmentVariableA
GetShortPathNameA
FreeLibrary
ExitProcess
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
WaitForSingleObject
GetLastError
CreateMutexA
GetModuleHandleA
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetCurrentThreadId
lstrlenA
GetSystemDirectoryA
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExA
GetSystemDefaultUILanguage
GetStartupInfoA
CreateProcessA
ExitThread
GetTickCount
InterlockedExchange
RaiseException
LocalAlloc

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

ws2_32

WSAIoctl
htons
socket
connect
setsockopt
recv
closesocket
gethostname
gethostbyname
WSACleanup
__WSAFDIsSet
select
send
inet_addr
sendto
WSASocketA
htonl
WSAStartup

msvcrt

_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
sprintf
fopen
rand
srand
time
fclose
fputs
realloc
malloc
strstr
atoi
strncpy
strcspn
exit
strncmp
_except_handler3
_exit
_XcptFilter
_acmdln
__getmainargs

shlwapi

SHDeleteKeyA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcf1fef5f79203fe2b0eb0d2ed44bb58

Headers

File Characteristics

Imports

kernel32

shell32

ws2_32

msvcrt

shlwapi

Sections

.text Size: 34KB - Virtual size: 33KB

.rsrc Size: 1024B - Virtual size: 848B

.text
Size: 34KB - Virtual size: 33KB

.rsrc
Size: 1024B - Virtual size: 848B