NEAS[.]01193bf981a462786fd5382ba3bd1380_JC[.]exe

General

Target

NEAS.01193bf981a462786fd5382ba3bd1380_JC.exe
Size

95KB
MD5

01193bf981a462786fd5382ba3bd1380
SHA1

1dca2cd3840c332305eadcd35c616a628ac87ba6
SHA256

d5a9cec03e25a4bdd3830aa521a7ed6e2313d04a1948ee8316b03981222bb919
SHA512

fcb1e048790239fafc7326d0c82645477ee0bbfaefcca2a4a26e4e6e2a6d383b2c9580cdbd0ce5500606794c751840282753220b2483bcf1096f0f2fb14c89bf
SSDEEP

1536:A0Qt8kFgOFHdeOYGFWZUMhZb+HNt+ZHPm9m4JvAI/LLxng1D4OKf9Qi6nEH0lNnl:qtSOFHMZUk4Hb+1UTKIjLO/KVkEH0PE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01193bf981a462786fd5382ba3bd1380_JC.exe

Files

NEAS.01193bf981a462786fd5382ba3bd1380_JC.exe
.exe windows:4 windows x86

889ccc4d5be3a3e584f0da430de80d09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringW
GetModuleFileNameW
GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetCurrentProcessId

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shlwapi

PathRemoveFileSpecW
PathAppendW

msvcr80

__winitenv
_initterm
_initterm_e
_configthreadlocale
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memmove_s
memcpy_s
_waccess
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler3
__setusermatherr
memset

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

889ccc4d5be3a3e584f0da430de80d09

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

msvcr80

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1012B

.rsrc Size: 79KB - Virtual size: 80KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1012B

.rsrc
Size: 79KB - Virtual size: 80KB