NEAS[.]dc5d0e0dd01908d68d8fdb6d656fc770_JC[.]exe

General

Target

NEAS.dc5d0e0dd01908d68d8fdb6d656fc770_JC.exe
Size

49KB
MD5

dc5d0e0dd01908d68d8fdb6d656fc770
SHA1

8005d85304f8191fe34a112e8446310699e1c238
SHA256

086d46c30accf4932b401041877ac4c402e7101b21c8765966c9fadd289cc028
SHA512

1b87e5f9cc1efe73667b3e57387bdc5d7f9d1c7c653b5b6890dbca45fd9885d622427150d72f4bb9403bdf1ae5cde76eb3ecee613ddf5c50adbb8d005c5a4b96
SSDEEP

768:Mu8OVI9VQRe7eo9HjLwNnREq2NbbbbyZcH1:qOVCQRHMH/wNi3bbbb8cV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc5d0e0dd01908d68d8fdb6d656fc770_JC.exe

Files

NEAS.dc5d0e0dd01908d68d8fdb6d656fc770_JC.exe
.exe windows:5 windows x86

3738e90116b156995499c16c1a65ac76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

DsAddressToSiteNamesA
DsAddressToSiteNamesExA
DsAddressToSiteNamesExW
DsAddressToSiteNamesW
DsDeregisterDnsHostRecordsW
DsEnumerateDomainTrustsA
DsEnumerateDomainTrustsW
DsGetDcCloseW
DsGetDcNameA

oleaut32

OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFile
OleLoadPictureFileEx

ntprint

PSetupFreeDrvField
PSetupFreeMem

regapi

RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA

msvcrt

fopen
fread

kernel32

OutputDebugStringW
IsDebuggerPresent
ExitProcess
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA

iashlpr

AllocateAttributes

sti

StiCreateInstance

msdart

??0CCritSec@@QAE@XZ
??0CDoubleList@@QAE@XZ

Sections

.text
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rSrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3738e90116b156995499c16c1a65ac76

Headers

File Characteristics

Imports

netapi32

oleaut32

ntprint

regapi

msvcrt

kernel32

iashlpr

sti

msdart

Sections

.text Size: 7KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 12KB

rSrc Size: 26KB - Virtual size: 26KB

.text
Size: 7KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 12KB

rSrc
Size: 26KB - Virtual size: 26KB