NEAS[.]8ec0278fd9b770e658d790de8f71e2b0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8ec0278fd9b770e658d790de8f71e2b0_JC.exe
Size

547KB
MD5

8ec0278fd9b770e658d790de8f71e2b0
SHA1

d8ddc78835b9eca7ffc5a03549b025dc3455bf5e
SHA256

626dff6bd85074247ee97ada9df47d404e28cd7976ad1e4e317ccabecd2ac479
SHA512

b57fbc564337a59d83e66e16721df75f21deb0a818a91d5d233aecdd520c1fe2dfeaa1d6adda4e6a1ff9eeb15af3598f9b9f8d20e8d65d40fed07408491cce98
SSDEEP

6144:9iUqMzSPNEcSVURrpyCRnYgpPLoqXM53P5F5MAmoMEc6fN8ubtFEjjYqS6DHfOa6:kUqgSPNlSVUBp/bpToqcJ//c2+RjP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8ec0278fd9b770e658d790de8f71e2b0_JC.exe

Files

NEAS.8ec0278fd9b770e658d790de8f71e2b0_JC.exe
.exe windows:4 windows x64

1a25396a51c21c83daf1b2d3791a4529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_onexit
abort
calloc
cosh
exit
fprintf
free
fwrite
log10
malloc
memcpy
memset
signal
sinh
strcmp
strlen
strncmp
vfprintf

libgcc_s_seh-1

_Unwind_Resume
__divsc3

libstdc++-6

_ZNSo9_M_insertIdEERSoT_
_ZNSo9_M_insertIeEERSoT_
_ZNSo9_M_insertImEERSoT_
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x
_ZSt4cout
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

qt5core

_Z20qResourceFeatureZlibv
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z9qBadAllocv
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEyyy6QFlagsINS_16AllocationOptionEE
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QTranslator4loadERK7QStringS2_S2_S2_
_ZN11QTranslatorC1EP7QObject
_ZN11QTranslatorD1Ev
_ZN16QCoreApplication13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE
_ZN16QCoreApplication17installTranslatorEP11QTranslator
_ZN16QCoreApplication18applicationDirPathEv
_ZN4QDir4cdUpEv
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN6QTimer10singleShotEiPK7QObjectPKc
_ZN7QLocale6systemEv
_ZN7QLocaleC1ENS_8LanguageENS_7CountryE
_ZN7QLocaleD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString6appendERKS_
_ZN7QString6numberEdci
_ZN7QString6numberEii
_ZN7QStringaSERKS_
_ZN8QVariantC1Eb
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData7disposeEPNS_4DataE
_ZN9QSettings10beginGroupERK7QString
_ZN9QSettings8endGroupEv
_ZN9QSettings8setValueERK7QStringRK8QVariant
_ZN9QSettingsC1ERK7QStringS2_P7QObject
_ZN9QSettingsD1Ev
_ZN9QtPrivate16QStringList_joinEPK11QStringListPK5QChari
_ZNK11QMetaObject2trEPKcS1_i
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK4QDir13canonicalPathEv
_ZNK7QLocale4nameEv
_ZNK7QString3argERKS_i5QChar
_ZNK7QString3argEdici5QChar
_ZNK7QString3argExii5QChar
_ZNK7QString5toIntEPbi
_ZNK7QString7toFloatEPb
_ZNK7QString8toDoubleEPb
_ZNK8QVariant5toIntEPb
_ZNK8QVariant6toBoolEv
_ZNK8QVariant8toStringEv
_ZNK9QSettings5valueERK7QStringRK8QVariant
_ZNK9QSettings8containsERK7QString

qt5gui

_ZN10QClipboard7setTextERK7QStringNS_4ModeE
_ZN10QValidator9setLocaleERK7QLocale
_ZN12QKeySequenceC1ENS_11StandardKeyE
_ZN12QKeySequenceC1Eiiii
_ZN12QKeySequenceD1Ev
_ZN13QIntValidatorC1EiiP7QObject
_ZN15QGuiApplication9clipboardEv
_ZN16QDoubleValidatorC1EddiP7QObject
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN5QIconC1ERK7QPixmap
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapD1Ev

qt5svg

_ZN10QSvgWidget4loadERK7QString
_ZN10QSvgWidgetC1ERK7QStringP7QWidget

qt5widgets

_ZN10QBoxLayout10addStretchEi
_ZN10QBoxLayout9addLayoutEP7QLayouti
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN10QStatusBar11showMessageERK7QStringi
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout16setColumnStretchEii
_ZN11QGridLayout9addWidgetEP7QWidgetii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1Ev
_ZN11QHBoxLayoutC1Ev
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox5aboutEP7QWidgetRK7QStringS4_
_ZN11QMessageBox7aboutQtEP7QWidgetRK7QString
_ZN11QMessageBoxC1ENS_4IconERK7QStringS3_6QFlagsINS_14StandardButtonEEP7QWidgetS4_IN2Qt10WindowTypeEE
_ZN11QPushButtonC1ERK7QStringP7QWidget
_ZN11QVBoxLayoutC1Ev
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTableWidget11setRowCountEi
_ZN12QTableWidget14setColumnCountEi
_ZN12QTableWidget23setVerticalHeaderLabelsERK11QStringList
_ZN12QTableWidget25setHorizontalHeaderLabelsERK11QStringList
_ZN12QTableWidget7setItemEiiP16QTableWidgetItem
_ZN12QTableWidgetC1EP7QWidget
_ZN14QPlainTextEdit10appendHtmlERK7QString
_ZN14QPlainTextEdit11setReadOnlyEb
_ZN14QPlainTextEdit15setWordWrapModeEN11QTextOption8WrapModeE
_ZN14QPlainTextEdit5clearEv
_ZN14QPlainTextEditC1EP7QWidget
_ZN16QTableWidgetItemC1ERK7QStringi
_ZN5QMenu12addSeparatorEv
_ZN5QMenuC1ERK7QStringP7QWidget
_ZN6QLabel7setTextERK7QString
_ZN6QLabel9setPixmapERK7QPixmap
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelC1ERK7QStringP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QAction10setCheckedEb
_ZN7QAction11setShortcutERK12QKeySequence
_ZN7QAction12setCheckableEb
_ZN7QAction12setStatusTipERK7QString
_ZN7QAction12setWhatsThisERK7QString
_ZN7QActionC1ERK7QStringP7QObject
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog4openEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QLayout12setAlignmentEP7QWidget6QFlagsIN2Qt13AlignmentFlagEE
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setDisabledEb
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget12setFixedSizeERK5QSize
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setFixedWidthEi
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16setMinimumHeightEi
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4moveERK6QPoint
_ZN7QWidget4showEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget5raiseEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget8setFocusEN2Qt11FocusReasonE
_ZN7QWidget9addActionEP7QAction
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setLayoutEP7QLayout
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QMenuBar12addSeparatorEv
_ZN8QMenuBar7addMenuEP5QMenu
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBox10removeItemEi
_ZN9QComboBox11insertItemsEiRK11QStringList
_ZN9QComboBox11setMaxCountEi
_ZN9QComboBox15setCurrentIndexEi
_ZN9QComboBoxC1EP7QWidget
_ZN9QGroupBoxC1ERK7QStringP7QWidget
_ZN9QLineEdit12setValidatorEPK10QValidator
_ZN9QLineEditC1ERK7QStringP7QWidget
_ZN9QTextEdit11setReadOnlyEb
_ZN9QTextEditC1ERK7QStringP7QWidget
_ZNK11QMainWindow7menuBarEv
_ZNK11QMainWindow9statusBarEv
_ZNK12QTableWidget4itemEii
_ZNK12QTableWidget8rowCountEv
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget1xEv
_ZNK7QWidget1yEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QComboBox12currentIndexEv
_ZNK9QComboBox5countEv
_ZNK9QLineEdit4textEv
_ZThn16_NK7QWidget10redirectedEP6QPoint
_ZThn16_NK7QWidget11initPainterEP8QPainter
_ZThn16_NK7QWidget11paintEngineEv
_ZThn16_NK7QWidget13sharedPainterEv
_ZThn16_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn16_NK7QWidget7devTypeEv

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 704B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a25396a51c21c83daf1b2d3791a4529

Headers

File Characteristics

Imports

kernel32

msvcrt

libgcc_s_seh-1

libstdc++-6

qt5core

qt5gui

qt5svg

qt5widgets

Sections

.text Size: 206KB - Virtual size: 205KB

.data Size: 13KB - Virtual size: 12KB

.rdata Size: 71KB - Virtual size: 70KB

.pdata Size: 3KB - Virtual size: 2KB

.xdata Size: 14KB - Virtual size: 14KB

.bss Size: - Virtual size: 704B

.idata Size: 16KB - Virtual size: 16KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 53KB - Virtual size: 53KB

/31 Size: 10KB - Virtual size: 9KB

/45 Size: 12KB - Virtual size: 11KB

/57 Size: 3KB - Virtual size: 3KB

/70 Size: 1KB - Virtual size: 1KB

/81 Size: 18KB - Virtual size: 17KB

/92 Size: 2KB - Virtual size: 2KB

.text
Size: 206KB - Virtual size: 205KB

.data
Size: 13KB - Virtual size: 12KB

.rdata
Size: 71KB - Virtual size: 70KB

.pdata
Size: 3KB - Virtual size: 2KB

.xdata
Size: 14KB - Virtual size: 14KB

.bss
Size: - Virtual size: 704B

.idata
Size: 16KB - Virtual size: 16KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 53KB - Virtual size: 53KB

/31
Size: 10KB - Virtual size: 9KB

/45
Size: 12KB - Virtual size: 11KB

/57
Size: 3KB - Virtual size: 3KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 18KB - Virtual size: 17KB

/92
Size: 2KB - Virtual size: 2KB