NEAS[.]a33b9ce41f88a6a731902842f9ce87b0_JC[.]exe

General

Target

NEAS.a33b9ce41f88a6a731902842f9ce87b0_JC.exe
Size

226KB
MD5

a33b9ce41f88a6a731902842f9ce87b0
SHA1

3f5dee4abcd87041a6f2c365fd92be717786c305
SHA256

b9bc75702486fa3642502b38e327bc940fa20e5c7927a263aa5ec80b439d7006
SHA512

30dd661166e4d323e91446aeda238314fba2371fe36f86a30bf1494b97dafcb94880a2ae3a24e2884c6a9994f514c01cc9bf2bc8c670b023ed292c9d1fb9d996
SSDEEP

3072:/Bb4M+rlz9GMSu3oHWWH1+cmm/foQnNtH5LcRQsq0d9HPAo2Cw2sC3sADsWZ:/14RzUNsYN1B9nX9Ud9Hc2sC8UD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a33b9ce41f88a6a731902842f9ce87b0_JC.exe

Files

NEAS.a33b9ce41f88a6a731902842f9ce87b0_JC.exe
.exe windows:4 windows x86

d3ae29358ce9e2d3548f7eadeda9e966

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
GetModuleFileNameA
LoadLibraryA
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
ReadFile
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ae29358ce9e2d3548f7eadeda9e966

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 63KB - Virtual size: 63KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 63KB - Virtual size: 63KB