NEAS[.]62ad9d5506a90bf82ba2f71a857e5680_JC[.]exe

General

Target

NEAS.62ad9d5506a90bf82ba2f71a857e5680_JC.exe
Size

16KB
MD5

62ad9d5506a90bf82ba2f71a857e5680
SHA1

1ca6d97fc697fe4e1cecea64ace1753a1ea01489
SHA256

7d425c982af62ca401e9ac440dc9a60f9c36d8fd383f272db9de2000ae893c31
SHA512

16db64eee43df80b7455e0615b726549532aa0b2aef8cba3082075349e9e03eef8012a9e2d79870b2b511376aa29cbe7977363a11c3a647f0b5100dcfdf8254a
SSDEEP

384:fVyX3P8EicYpee/WarLzwzhenONdWcsfui:NhueNkzQn8sfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.62ad9d5506a90bf82ba2f71a857e5680_JC.exe

Files

NEAS.62ad9d5506a90bf82ba2f71a857e5680_JC.exe
.exe windows:6 windows x86

4753ca4cb7f5df615d2940f474a003c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
OpenEventW
InterlockedExchange
CloseHandle
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetVersion
WaitForSingleObject
LocalFree
Sleep
VirtualAlloc
LocalAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange

msvcrt

wcstoul
_controlfp
?terminate@@YAXXZ
memcpy
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs

ole32

CoCreateInstance
CoUninitialize
CLSIDFromString
CoInitializeEx

shlwapi

ord437

ntdll

RtlUnwind

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA

user32

GetSystemMetrics

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4753ca4cb7f5df615d2940f474a003c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

ole32

shlwapi

ntdll

version

advapi32

user32

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB