NEAS[.]0006a6e30b91e66dfe12fa6956642540_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0006a6e30b91e66dfe12fa6956642540_JC.exe
Size

835KB
MD5

0006a6e30b91e66dfe12fa6956642540
SHA1

55949621b6d2aeca014992e42e2a887656ec1a4c
SHA256

7ef1796927a80869b89412a58e22ed466e8a47d4ed6116c0cb04db34805ef8ca
SHA512

962615bcdf37dd12bd522a0173df14ee873f456a5153ecee2b64da22d43c134b1bea1b0ed00f35ee22d48f1cf37d7b46d4ba67758c4d2ce882348340456b5308
SSDEEP

24576:0qOuBIXgMxuC6Lk2mBHvGBJr91gnF14Xhs:0qZzK56Lk2mBHezh1gnFCG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0006a6e30b91e66dfe12fa6956642540_JC.exe

Files

NEAS.0006a6e30b91e66dfe12fa6956642540_JC.exe
.exe windows:5 windows x86

b024f12829811d2adcf300a22c194020

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

UnhandledExceptionFilter
GetFileType
GetSystemDirectoryW
GetModuleHandleW
GetLastError
GetFileInformationByHandle
GetProcessWorkingSetSize
GetProfileIntW
SizeofResource
ConvertDefaultLocale
SearchPathW
GetPrivateProfileIntW
SetEndOfFile
FreeLibrary
GlobalHandle
CopyFileW
FindNextFileW
MoveFileExW
CloseHandle
LocalFree
GetVersionExW
FindResourceExW
GetTickCount
FormatMessageW
SetThreadPriority
GlobalDeleteAtom
TlsSetValue
LoadLibraryA
HeapReAlloc
GetSystemInfo
WaitForSingleObject
GetVersion
LocalReAlloc
EnumSystemLocalesA
lstrcpyW
RaiseException
GlobalAddAtomA
lstrcatA
GetModuleHandleA
LoadLibraryExA
lstrcpyA
ExitProcess
FindResourceW
IsDebuggerPresent
HeapQueryInformation
HeapSize
WideCharToMultiByte
GlobalMemoryStatus
GetLongPathNameW
CreateThread
Sleep
HeapCreate
InitializeCriticalSection
SetLastError
FlushFileBuffers
lstrlenA
RtlUnwind
VirtualUnlock
PeekNamedPipe
GetFileTime
FreeResource
GetDriveTypeW
HeapDestroy
LoadResource
GlobalFree
InterlockedCompareExchange
GetCurrentDirectoryW
GetLocaleInfoW
WriteFile
VirtualLock
WriteConsoleW
TlsGetValue
IsProcessorFeaturePresent
HeapAlloc
lstrcmpW
DeleteAtom
MulDiv
TlsFree
InterlockedIncrement
ExitThread
GetOEMCP
FileTimeToSystemTime
GetStdHandle
GetStartupInfoW
VirtualProtect
GetFullPathNameW
InitializeCriticalSectionAndSpinCount
LocalAlloc
GlobalFindAtomW
GetCommandLineW
GetProcAddress
InterlockedDecrement
GetTempFileNameW
ReadFile
FindFirstFileW
GetCurrentThread
DeleteFileW
GetWindowsDirectoryW
GetTempPathW
GlobalAlloc
GlobalAddAtomW
QueryPerformanceCounter
GetConsoleMode
GetStartupInfoA
GlobalUnlock
GetCurrentProcessId
GetProcessHeap
GetSystemTimeAsFileTime
ReleaseMutex
GetFileSizeEx
LockResource
GetEnvironmentStringsW
GetFileSize
FreeEnvironmentStringsW
CreateMutexW
GetPrivateProfileStringW
UnlockFile
lstrlenW
DeleteCriticalSection
FindFirstFileExW
GetThreadTimes
LoadLibraryExW
GlobalReAlloc
InterlockedExchange
SetErrorMode
GetFileAttributesW
lstrcmpA
GetSystemDefaultUILanguage
WritePrivateProfileStringW
FlushInstructionCache
SetHandleCount
CompareStringA
GetConsoleCP
IsValidCodePage
GetACP
MultiByteToWideChar
GetCurrentProcess
LeaveCriticalSection
GetVolumeInformationW
GlobalFlags
FileTimeToLocalFileTime
LoadLibraryW
GetNumberFormatW
GlobalSize
GetProcessTimes
GetFileAttributesExW
VirtualFree
ResumeThread
SetUnhandledExceptionFilter
FindClose
EnterCriticalSection
CreateFileW
IsValidLocale
DuplicateHandle
GetThreadLocale
GetCurrentThreadId
GetTimeZoneInformation
SuspendThread
CreateEventW
SetFilePointer
LockFile
lstrcmpiW
GetModuleFileNameW
SetStdHandle
GetLocaleInfoA
CompareStringW
GlobalLock
SetEnvironmentVariableA
GlobalGetAtomNameW
HeapSetInformation
GetUserDefaultLCID
VirtualQuery

user32

CreateIconFromResourceEx
SetFocus
SetMenuDefaultItem
SetTimer
GetMenuCheckMarkDimensions
AppendMenuW
GetDoubleClickTime
ReleaseDC
GetWindowTextW
MoveWindow
RemovePropW
SetWindowLongW
UnregisterClassW
GetMenuItemID
GetWindowDC
SetPropW
IsDialogMessageW
SystemParametersInfoW
CopyImage
SetClipboardData
TrackPopupMenu
GetIconInfo
InsertMenuW
DefWindowProcW
MapDialogRect
UnhookWindowsHookEx
DestroyCursor
MapVirtualKeyExW
CharUpperW
TranslateMDISysAccel
InsertMenuItemW
OffsetRect
SetWindowRgn
LoadBitmapW
IsClipboardFormatAvailable
CopyIcon
DrawFrameControl
IntersectRect
AdjustWindowRectEx
CallWindowProcW
SetWindowContextHelpId
GetNextDlgTabItem
SetScrollPos
GetAsyncKeyState
GetMenu
GetSystemMenu
DrawTextExW
DeleteMenu
SetCapture
GetSysColorBrush
SetRect
CharUpperBuffW
GetWindowTextLengthW
GetDC
FrameRect
DrawEdge
GetClassLongW
GetCaretPos
TranslateMessage
EndPaint
GetForegroundWindow
SetCursor
CreatePopupMenu
DrawIcon
KillTimer
GetKeyNameTextW
GetWindow
HideCaret
DrawTextW
ValidateRect
GetClientRect
TranslateAcceleratorW
SetWindowPlacement
GetWindowRect
PeekMessageW
SetMenu
CheckDlgButton
GetMenuState
RemoveMenu
GetDlgItem
IsWindowEnabled
GetQueueStatus
DialogBoxParamW
GetMessageTime
CopyRect
PostMessageW
CloseClipboard
GetSubMenu
CreateWindowExW
GetOpenClipboardWindow
SetWindowsHookExW
GetWindowLongW
ClientToScreen
EndDeferWindowPos
SetActiveWindow
GetLastActivePopup
ClipCursor
OpenClipboard
GetSystemMetrics
DrawIconEx
IsMenu
ShowOwnedPopups
DrawFocusRect
ShowWindow
GetClassNameW
GetWindowThreadProcessId
RegisterWindowMessageW
GetMenuItemInfoW
MapVirtualKeyW
EnableMenuItem
GetClassInfoW
CheckMenuItem
EmptyClipboard
SetWindowPos
CreateIcon
InvertRect
GetDlgItemTextW
CreateMenu
EqualRect
EndDialog
GetWindowRgn
BeginDeferWindowPos
UpdateLayeredWindow
CharNextW
SetLayeredWindowAttributes
CallNextHookEx
DestroyIcon
SetWindowTextW
CreateDialogIndirectParamW
GetScrollPos
WaitMessage
FillRect
GetDesktopWindow
DefFrameProcW
GetClassInfoExW
LoadImageW
GetClipboardViewer
DispatchMessageW
TabbedTextOutW
UnionRect
ReleaseCapture
GetDialogBaseUnits
GetProcessWindowStation
DialogBoxIndirectParamW
GetMonitorInfoW
RegisterClipboardFormatW
SetMenuItemBitmaps
ModifyMenuW
SetScrollInfo
GetFocus
LoadIconW
IsChild
PtInRect
MonitorFromWindow
GetDlgCtrlID
MapWindowPoints
LoadCursorW
InflateRect
UnregisterClassA
GetScrollRange
GetMessagePos
GetPropW
EnableWindow
GetMessageW
ScrollWindow
GetScrollInfo
LoadMenuW
EnableScrollBar
SetScrollRange
GetCapture
GetMenuStringW
InvalidateRect
SendMessageW
RealChildWindowFromPoint
GetUpdateRect
WinHelpW
SetDlgItemTextW
GetTopWindow
PostQuitMessage
MonitorFromPoint
UpdateWindow
DrawStateW
GetKeyState
DefMDIChildProcW
RegisterClassW

gdi32

ExcludeClipRect
IntersectClipRect
CreateRectRgn
CreatePen
CreatePatternBrush
GetBkMode
OffsetRgn
GetNearestPaletteIndex
SelectPalette
GetCurrentObject
GetTextExtentPoint32W
SetDIBitsToDevice
SetBitmapBits
ScaleWindowExtEx
GetLayout
GetBoundsRect
LPtoDP
SetLayout
GetRgnBox
GetBkColor
GetTextExtentPointW
RestoreDC
SaveDC
OffsetWindowOrgEx
DeleteObject
GetTextMetricsW
GetWindowExtEx
CreateFontW
GetViewportExtEx
CreateDIBSection
ExtSelectClipRgn
FillRgn
CreateDIBitmap
CreateCompatibleDC
GetWindowOrgEx
SetMapMode
FrameRgn
Rectangle
EnumFontFamiliesExW
GetStockObject
CombineRgn
CreateEllipticRgn
GetDeviceCaps
Ellipse
GetObjectType
SetWindowExtEx
EnumFontFamiliesW
RoundRect
SelectObject
RectVisible
OffsetViewportOrgEx
SelectClipRgn
SetStretchBltMode
ScaleViewportExtEx
GetTextCharsetInfo
SetDIBits
SetViewportOrgEx
CreateCompatibleBitmap
SetTextAlign
PtInRegion
DPtoLP
StretchBlt
RealizePalette
CreatePolygonRgn
SetROP2
GetPaletteEntries
SetRectRgn
SetPixel
SetBkColor
SetPixelV
ExtTextOutW
SetDIBColorTable
CreateBitmap
TextOutW
MoveToEx
LineTo
CreateHatchBrush
CreateSolidBrush
GetMapMode
GetViewportOrgEx
GetObjectW
GetSystemPaletteEntries
DeleteDC
SetViewportExtEx
CreatePalette
CreateRoundRectRgn
SetBkMode
SetPolyFillMode
PtVisible
GetTextColor
GetClipBox
SetWindowOrgEx
CreateRectRgnIndirect
CreateDCW
Polyline
CreateFontIndirectW
GetBitmapBits
GetTextFaceW
Escape
SetPaletteEntries
ExtFloodFill
GetPixel
SetTextColor
CopyMetaFileW
PatBlt
BitBlt
Polygon

advapi32

RegQueryInfoKeyW
CheckTokenMembership
RegEnumKeyW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
CryptGenRandom
RegQueryValueExW
RegDeleteKeyW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExA
RegQueryValueW
RegCloseKey
RegOpenKeyExA

shell32

ExtractIconExW
DragFinish
SHAppBarMessage
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
DuplicateIcon
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
Shell_NotifyIconW
SHBrowseForFolderW

ole32

CoRevokeClassObject
OleUninitialize
RegisterDragDrop
CoLockObjectExternal
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
IsAccelerator
RevokeDragDrop
DoDragDrop
OleTranslateAccelerator
OleInitialize
OleGetClipboard
CoRegisterClassObject
OleLockRunning
CoInitialize
CLSIDFromString
CoFreeUnusedLibraries
OleDuplicateData
CoCreateGuid
StringFromGUID2
OleFlushClipboard
CLSIDFromProgID
OleCreateMenuDescriptor
ReleaseStgMedium
CoCreateInstance
CoInitializeEx
CreateILockBytesOnHGlobal
CoUninitialize
CoTaskMemRealloc
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes

oleaut32

VariantCopy
VariantInit
VariantClear
OleCreateFontIndirect
VarBstrCat
VarBstrFromDate
VarUI4FromStr
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringLen
SysFreeString
LoadTypeLi
SysAllocStringLen
SysStringByteLen
VariantTimeToSystemTime
RegisterTypeLi
UnRegisterTypeLi
VarBstrCmp
SysAllocString
SafeArrayDestroy
VariantChangeType

comctl32

ImageList_DragShowNolock
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DragMove

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 140KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b024f12829811d2adcf300a22c194020

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 641KB - Virtual size: 640KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 140KB - Virtual size: 5.4MB

.tls Size: - Virtual size: 101B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 641KB - Virtual size: 640KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 140KB - Virtual size: 5.4MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 14KB - Virtual size: 13KB