NEAS[.]3af56bcd7f24d1fb2247c7f89ce21ad0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3af56bcd7f24d1fb2247c7f89ce21ad0_JC.exe
Size

233KB
MD5

3af56bcd7f24d1fb2247c7f89ce21ad0
SHA1

70999d9f0928de5f77f438dd9dee44a18716cbff
SHA256

dfc5391521932925a4a4988ae34097cad2b1b06dc9dc1c5b9ee93259aa00f61c
SHA512

48d03fc6a94734047dd4813bc3ffe8c380cc6858c795fbdfe7b625b798496a446e5a2f0aead35879d33746cd992b0711a5e364266c253e8cc81a84f5c76d0f53
SSDEEP

6144:DyZVQ1AZb8q1aIHBhYZezq0tihp5vBAF:2ZpBn5IZOqBpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3af56bcd7f24d1fb2247c7f89ce21ad0_JC.exe

Files

NEAS.3af56bcd7f24d1fb2247c7f89ce21ad0_JC.exe
.dll regsvr32 windows:10 windows x86

bef3c02042ea700c57934d17159563d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind
_alloca_probe
wcsstr
wcstoul
_ultow
wcstombs
iswascii
_stricmp
tolower
_CIpow
_CIsqrt
_alldiv
_ftol2_sse
memcpy
memset
_wcsicmp

msvcrt

malloc
free
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@XZ
_beginthreadex
_endthreadex
_purecall
_callnewh
_XcptFilter
_amsg_exit
__dllonexit
_initterm
_lock
__CxxFrameHandler3
_unlock
_onexit
??1type_info@@UAE@XZ
??0exception@@QAE@ABV0@@Z

api-ms-win-core-com-l1-1-0

CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemFree
StringFromCLSID

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-registry-l1-1-0

RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetEvent
CreateEventA
EnterCriticalSection
WaitForSingleObject

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA

api-ms-win-core-string-obsolete-l1-1-0

lstrlenA

api-ms-win-core-registry-l2-1-0

RegEnumKeyA
RegDeleteKeyA

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bef3c02042ea700c57934d17159563d4

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

msvcrt

api-ms-win-core-com-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-profile-l1-1-0

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.data Size: 2KB - Virtual size: 3KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 144KB - Virtual size: 144KB

.text
Size: 81KB - Virtual size: 81KB

.data
Size: 2KB - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 144KB - Virtual size: 144KB