NEAS[.]05fbb5c1c970c344df9e4f22efa490f0_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.05fbb5c1c970c344df9e4f22efa490f0_JC.exe
Size

432KB
MD5

05fbb5c1c970c344df9e4f22efa490f0
SHA1

2aedca9a00dd768ee272e4cd438a4c147ad40b9c
SHA256

35ea4dc8b29f1190257a6fa36fb594db02d924540fb62dc2ce2a6381c0a1d48e
SHA512

15059437a0eef0a3a2f38a977e7cf9112563ee2eb60c4480c9e95b683e3182785902c7ab73b4d530552930519118d9a702c81b4bdacac7c27fe384328a094463
SSDEEP

6144:zp4w53v4mDGnN0P1jdXRuHKKxKBuyLkLRh50rOfo9R:FvPGnyP1jV4HKK4G9viOfo9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05fbb5c1c970c344df9e4f22efa490f0_JC.exe

Files

NEAS.05fbb5c1c970c344df9e4f22efa490f0_JC.exe
.exe windows:4 windows x86

6afe2d3b6281bb3ca4f7d8bfc15c0848

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

modbusl

_RemoveDataBlock@4
_DefineDataBlock@20
_CloseConnection@4
_ActivateSlaveId@8
_OpenTCPConnection@8
_OpenConnection@20

wsock32

WSACleanup
WSAStartup

kernel32

GetStartupInfoA
SetCurrentDirectoryA
ExitProcess
SetEnvironmentVariableA
RtlUnwind
GetCommandLineA
HeapFree
TerminateProcess
RaiseException
GetTimeZoneInformation
HeapAlloc
GetLocalTime
GetACP
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetSystemTime
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapReAlloc
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
LockResource
GetCurrentThreadId
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcatA
GlobalLock
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
lstrcpyA
lstrlenA
GetProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SizeofResource
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GlobalFlags
GetProcessVersion
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
MulDiv
GetTickCount
GlobalAlloc
GetCurrentThread
SetLastError
lstrcmpA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
MultiByteToWideChar
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
GlobalFree
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
IsBadWritePtr
LCMapStringA
GetEnvironmentStrings
GetEnvironmentVariableA

user32

ScreenToClient
GrayStringA
SetRect
GetSysColorBrush
GetClassNameA
LoadStringA
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
PostThreadMessageA
InflateRect
GetDCEx
LockWindowUpdate
SetParent
SendDlgItemMessageA
MapWindowPoints
GetSysColor
TabbedTextOutA
DrawTextA
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
MessageBoxA
IsChild
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
DispatchMessageA
BeginPaint
ValidateRect
GetWindowThreadProcessId
GetWindowPlacement
GetWindowDC
EndPaint
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
wsprintfA
GetParent
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
ShowOwnedPopups
PostQuitMessage
CharUpperA
IsZoomed
PtInRect
GetMessageA
TranslateMessage
ClientToScreen
WindowFromPoint
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
GetSubMenu
KillTimer
ReleaseDC
GetDC
UpdateWindow
GetWindowRect
LoadBitmapA
SetTimer
InvalidateRect
GetSystemMetrics
RegisterClipboardFormatA
GetLastActivePopup
SetForegroundWindow
OffsetRect
GetCursorPos
SendMessageA
EnableWindow
WaitMessage
SetCapture
LoadCursorA
wvsprintfA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
IntersectRect
SystemParametersInfoA
SetWindowsHookExA
DestroyWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

CreateDIBitmap
GetTextMetricsA
GetTextExtentPoint32A
Rectangle
GetTextExtentPointA
GetDeviceCaps
BitBlt
SetBkColor
CreateBitmap
DeleteDC
StretchDIBits
SelectObject
CreateCompatibleBitmap
DeleteObject
StartDocA
SaveDC
RestoreDC
GetStockObject
SetBkMode
SetMapMode
SetTextColor
GetClipBox
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
AbortDoc
EndDoc
EndPage
StartPage
DPtoLP
SetAbortProc
CreateDCA
CreateFontIndirectA
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateCompatibleDC
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
CommDlgExtendedError
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
GetFileSecurityA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
SetFileSecurityA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA

comctl32

ord17

oledlg

ord8

ole32

StringFromCLSID
CoTaskMemFree
CoDisconnectObject
CoRegisterMessageFilter
CoRegisterClassObject
CoTaskMemAlloc
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

SysFreeString
VariantCopy
SysStringByteLen
VariantClear
VariantChangeType
SysAllocStringLen
SysAllocString
SysStringLen
SysAllocStringByteLen
LoadTypeLi

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6afe2d3b6281bb3ca4f7d8bfc15c0848

Headers

File Characteristics

Imports

modbusl

wsock32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

Sections

.text Size: 224KB - Virtual size: 223KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 128KB - Virtual size: 128KB

.text
Size: 224KB - Virtual size: 223KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 128KB - Virtual size: 128KB