NEAS[.]eafe71d48de564cab458252ed21ed500_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eafe71d48de564cab458252ed21ed500_JC.exe
Size

292KB
MD5

eafe71d48de564cab458252ed21ed500
SHA1

0f8a65844974db343e3aa87c63d38bdf324a714e
SHA256

551e0940d89674ea898b1f3554b6985e2729d8310736a51c9f8760ee482593b4
SHA512

eb9b28b5f45ed01021f28bcc2a216fbbf94aa42563d213ddea9e5779e1f4575244ffd5c8e600cafad62de3daa2ebd70a61b04c4a34dfa739e05e027025bc21fa
SSDEEP

6144:Q8cwwcuSsbVBx4r1dBQP+1yP5HUCyLlY1iC5Dd:0wwJfbVBWxQiu5HU/Z0iCn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eafe71d48de564cab458252ed21ed500_JC.exe

Files

NEAS.eafe71d48de564cab458252ed21ed500_JC.exe
.exe windows:4 windows x86

ab71d01d3658763fb87af9bba83d4596

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
LoadLibraryW
SetCurrentDirectoryW
GetSystemDirectoryW
GetCurrentDirectoryW
CreateProcessW
GetSystemDefaultLangID
GetVersionExW
GetCurrentProcess
FreeLibrary
GetProcAddress
CreateThread
GetSystemInfo
VirtualProtect
SetErrorMode
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetEndOfFile
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
_lcreat
GlobalLock
GlobalUnlock
CreateDirectoryW
GetLastError
WideCharToMultiByte
GlobalAlloc
GlobalFree
GetTempPathW
MultiByteToWideChar
CloseHandle
CreateFileW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
LCMapStringW
RemoveDirectoryW
ExitProcess
GetModuleHandleA
TerminateProcess
WriteFile
HeapFree
HeapAlloc
ReadFile
SetFilePointer
DeleteFileA
GetFileAttributesW
GetStartupInfoW
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
InitializeCriticalSection
RtlUnwind
HeapSize
InterlockedExchange
VirtualQuery
FlushFileBuffers

user32

GetMessageW
DestroyWindow
TranslateMessage
DispatchMessageW
LoadCursorW
RegisterClassW
PostThreadMessageW
DefWindowProcW
PostQuitMessage
BeginPaint
EndPaint
GetWindowLongW
GetDC
InvalidateRect
ReleaseDC
AdjustWindowRectEx
GetDesktopWindow
GetWindowRect
CreateWindowExW
SetWindowLongW
ShowWindow
UpdateWindow
LoadImageW
ExitWindowsEx
LoadStringW
MessageBoxW

gdi32

CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SelectPalette
UnrealizeObject
RealizePalette
CreatePalette
GetObjectW
DeleteObject

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueW
RegCloseKey
OpenProcessToken

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab71d01d3658763fb87af9bba83d4596

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 232KB - Virtual size: 231KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 232KB - Virtual size: 231KB