NEAS[.]48185a6d403d911afb561aedfb8e61c0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48185a6d403d911afb561aedfb8e61c0_JC.exe
Size

67KB
MD5

48185a6d403d911afb561aedfb8e61c0
SHA1

9fa01b14dc9b590aef278c5d0874cbf707882541
SHA256

31a0d71f798c5235dd720cca10599a05e95b33578b24dd6635ff2f2df2657a6c
SHA512

470f80310931aa89e3c28931ea889cba380f6027c186479e4fe852aca7af89e2fa6a721c4583e7270c6acb83ef5077758eb0d3e09e96315a51b17451f78c7012
SSDEEP

768:F3YXkUOAi/BmX1u35aM8E355zVgE35/lFMvcg+z:95/Z/BmX1jlEhME/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48185a6d403d911afb561aedfb8e61c0_JC.exe

Files

NEAS.48185a6d403d911afb561aedfb8e61c0_JC.exe
.exe windows:6 windows x86

d4b39cb977e45b8f3c4614c96ccc1f15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

qt5guid

?exec@QGuiApplication@@SAHXZ
??1QGuiApplication@@UAE@XZ
??0QGuiApplication@@QAE@AAHPAPADH@Z

qt5qmld

?load@QQmlApplicationEngine@@QAEXABVQUrl@@@Z
?rootObjects@QQmlApplicationEngine@@QAE?AV?$QList@PAVQObject@@@@XZ
??1QQmlApplicationEngine@@UAE@XZ
??0QQmlDebuggingEnabler@@QAE@_N@Z
??0QQmlApplicationEngine@@QAE@PAVQObject@@@Z

qt5cored

??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
??1QUrl@@QAE@XZ
?qRegisterResourceData@@YA_NHPBE00@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?isEmpty@QListData@@QBE_NXZ
?dispose@QListData@@SAXPAUData@1@@Z
?qt_assert@@YAXPBD0H@Z
??0QString@@QAE@UQStringDataPtr@@@Z
??1QString@@QAE@XZ
??0QString@@QAE@ABV0@@Z
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z

kernel32

GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetCommandLineW
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId

vcruntime140d

__std_exception_destroy
__std_exception_copy
__std_type_info_destroy_list
_except_handler4_common
memset
__CxxFrameHandler3
_CxxThrowException

ucrtbased

_cexit
_seh_filter_exe
_set_app_type
__setusermatherr
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_set_fmode
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
terminate
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_callnewh
malloc

shell32

CommandLineToArgvW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4b39cb977e45b8f3c4614c96ccc1f15

Headers

DLL Characteristics

File Characteristics

Imports

qt5guid

qt5qmld

qt5cored

kernel32

vcruntime140d

ucrtbased

shell32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 3KB

.gfids Size: 512B - Virtual size: 373B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 3KB

.gfids
Size: 512B - Virtual size: 373B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB