NEAS[.]4362d007c7e8526b82e269b649a99c70_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4362d007c7e8526b82e269b649a99c70_JC.exe
Size

209KB
MD5

4362d007c7e8526b82e269b649a99c70
SHA1

a04c8a3b7a0e40be54a29dd0656788dbffbe091c
SHA256

54506afdaceec29dfe9744ef83e8dc15c1395faa294d4be7986b33014c8379c3
SHA512

2bc538ec7d3577b402cb0e8cc0ccdbfd862f8ecc8934570ef2b16d59494480b4d6a85a8b9324abab1133bdd42a53078c9b0cec815625dc12bea9bb374082793e
SSDEEP

6144:9OB8K/S3r3FfK3yDrjQVEzUIVhK+2aZyRO:9BKKzFfKCbQVEzNz4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4362d007c7e8526b82e269b649a99c70_JC.exe

Files

NEAS.4362d007c7e8526b82e269b649a99c70_JC.exe
.exe windows:4 windows x86

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
GetModuleHandleA
GetTempFileNameA
GetNumberFormatW
ExpandEnvironmentStringsA
GetMailslotInfo
GetExitCodeProcess
FindResourceW
GetModuleFileNameW
GetProcAddress
ConnectNamedPipe
CreateFileMappingW
Beep
lstrlenW
CreateThread
GetHandleInformation
SetLocaleInfoA
SetThreadPriority
GetLogicalDriveStringsW
GetLastError
GetSystemTime
CreateMailslotA
OpenSemaphoreW
GetFullPathNameA
GlobalAlloc
QueryPerformanceCounter
OpenSemaphoreA
CreateSemaphoreW
GetVersionExA
SetCurrentDirectoryA
MulDiv
GetStringTypeA
GetFileType
lstrcpyA
GlobalGetAtomNameA
SetPriorityClass
GetStartupInfoW
InitializeCriticalSection
GetFileAttributesA
CreateMutexW
GetEnvironmentVariableW
GetFullPathNameW
ExitThread
GetTempPathW

user32

SetWindowLongA
GetDC
TrackPopupMenu
CharNextA
AnimateWindow
CopyImage
AppendMenuW
wsprintfA
CreateDesktopA
SetCapture
GetIconInfo
LoadBitmapA
GetClassNameW
IsChild
SetCursor
CreateDesktopW
GetDlgItem
GetMenuItemRect
GetClientRect
GetMenuItemInfoA
BringWindowToTop
UpdateWindow
MonitorFromRect
UpdateLayeredWindow
LoadIconW
IsWindowEnabled
LoadCursorA
OpenClipboard
GetMessageW
DefWindowProcA
RemoveMenu

gdi32

EndPath
CreatePatternBrush
UpdateColors
GetCharacterPlacementW
GetGlyphIndicesW
GetObjectType
CreateDCA
GetMetaFileA

advapi32

RegOpenKeyExA
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW

shell32

SHGetDataFromIDListW
SHGetFolderLocation
SHCreateDirectory
SHGetFolderPathW
StrRStrA
StrRStrW

ole32

CoGetCallerTID
CoDosDateTimeToFileTime
CoCreateInstanceEx
CoInitializeEx
OleInitialize
OleCreate
CoFileTimeNow

oleaut32

SafeArrayPutElement
VarR8FromDisp
VarI4FromUI4

setupapi

pSetupGuidFromString
SetupDiDeleteDeviceInfo
SetupScanFileQueueA
SetupDiGetClassDevPropertySheetsW
SetupDiClassGuidsFromNameExA

ws2_32

htonl
gethostbyaddr
setsockopt
getnameinfo
getservbyport
htons
WSACreateEvent
sendto

inetcomm

MimeOleCreateHeaderTable
CreateSMTPTransport
MimeOleSMimeCapRelease
MimeOleSetPropW
MimeOleCreateByteStream
EssSignCertificateEncodeEx
MimeOleParseRfc822AddressW
MimeOleSetBodyPropA
EssReceiptRequestDecodeEx
EssReceiptEncodeEx
HrGetDisplayNameWithSizeForFile

crypt32

CertGetStoreProperty
CertUnregisterSystemStore
I_CertSrvProtectFunction
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertAddCRLLinkToStore
CryptHashMessage
RegDeleteValueU
CryptMsgGetAndVerifySigner
CryptVerifySignatureU

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cKhu
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AqeNl
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Dv
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NEEiJj
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RD
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MM
Size: 2KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VvQw
Size: 1KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

681262d45b7a9535aa53c20cfd2bf9b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

setupapi

ws2_32

inetcomm

crypt32

Sections

.text Size: 12KB - Virtual size: 11KB

.cKhu Size: 2KB - Virtual size: 36KB

.AqeNl Size: 4KB - Virtual size: 20KB

.G Size: 1KB - Virtual size: 29KB

.Dv Size: 2KB - Virtual size: 31KB

.NEEiJj Size: 1KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 5KB

.RD Size: 1024B - Virtual size: 11KB

.R Size: 1024B - Virtual size: 4KB

.MM Size: 2KB - Virtual size: 25KB

.VvQw Size: 1KB - Virtual size: 179KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.cKhu
Size: 2KB - Virtual size: 36KB

.AqeNl
Size: 4KB - Virtual size: 20KB

.G
Size: 1KB - Virtual size: 29KB

.Dv
Size: 2KB - Virtual size: 31KB

.NEEiJj
Size: 1KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 5KB

.RD
Size: 1024B - Virtual size: 11KB

.R
Size: 1024B - Virtual size: 4KB

.MM
Size: 2KB - Virtual size: 25KB

.VvQw
Size: 1KB - Virtual size: 179KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1KB - Virtual size: 1KB