NEAS[.]4f022cf7fbfd71dbe38585d756169ec0_JC[.]exe

General

Target

NEAS.4f022cf7fbfd71dbe38585d756169ec0_JC.exe
Size

36KB
MD5

4f022cf7fbfd71dbe38585d756169ec0
SHA1

94b4665e7a15ca7eb7c98fe2c9270175c15ac8d4
SHA256

d2ace62ac28adfe74814bdbbddc99ce512b2bfab6cef390e366395ee6f947804
SHA512

8d6b6dcbc72336bd2a232350cd7decf6ee2e5e67f42b71f8933db4232ba28d222731aa807b0b228a3e8aac5b9c40fd1f5ef9a4cb9c0254684bb98e1643e2b8d7
SSDEEP

768:cLVpe+RIyVPIwYe7A0IW9+6IwYe7aYFdXDpv:kVg2IyVPPYe7AM46PYe7aYFxpv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4f022cf7fbfd71dbe38585d756169ec0_JC.exe

Files

NEAS.4f022cf7fbfd71dbe38585d756169ec0_JC.exe
.exe windows:4 windows x86

5454eaf264e4265dcda6c61e7288dd0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
CompareStringW
GetModuleHandleW
GetFullPathNameW
GetStringTypeW
lstrcpynW
GetCurrentProcess
lstrcmpA
GetProcAddress
TlsGetValue
OpenMutexA
GetPrivateProfileSectionA
WaitForSingleObjectEx
FoldStringW
WriteConsoleA
GetPrivateProfileSectionA
HeapAlloc
FileTimeToSystemTime
InterlockedDecrement
CopyFileW
DeviceIoControl
ReplaceFileA
FindNextVolumeW
QueryDosDeviceA
GetSystemTime
SetEnvironmentVariableA
GetLocalTime
GetDiskFreeSpaceA
SearchPathA
IsValidCodePage
GetShortPathNameA
GetTickCount
GetVolumePathNameA
GetPrivateProfileSectionA
SetErrorMode
GetProcessHeap
FindFirstVolumeW

cryptdll

MD5Final
MD5Init
CDLocateRng
CDBuildVect
MD5Update

user32

GetClassInfoA
CharToOemA
GetMessageW
EnumDesktopsA
GetCaretPos
IsDialogMessageA
wsprintfA
DispatchMessageA
SetFocus
PostMessageW
DrawIcon
DrawTextA
LoadCursorA
CreateDesktopA
DialogBoxParamW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5454eaf264e4265dcda6c61e7288dd0a

Headers

File Characteristics

Imports

kernel32

cryptdll

user32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 10KB