NEAS[.]96cc1ad3fbf60d266103a8958600f9a0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.96cc1ad3fbf60d266103a8958600f9a0_JC.exe
Size

300KB
MD5

96cc1ad3fbf60d266103a8958600f9a0
SHA1

8661d37e95a1d43a4e77657608cc8d78b7a3e1fb
SHA256

1ef64b7ce8788a386f794553be5478391b312f1fc1fba6df8a864111e9c5ca3c
SHA512

f373f3c2b3056cf832086b10cfd539a75450f78c29ffc13fc616211a991028d5ce7d83ce8a3f315ab7f80899bf9344db1d2db939fa1863c5eeb4d0f853c17afa
SSDEEP

6144:97Lkj89csZUR7K94iF0iEaKyq+pwHreSNuQwQ9WigN:VLncsZcMxVqCmaSNP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.96cc1ad3fbf60d266103a8958600f9a0_JC.exe

Files

NEAS.96cc1ad3fbf60d266103a8958600f9a0_JC.exe
.exe windows:4 windows x86

cb9ca07b713c16f9b4af91b8a286a353

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
PathGetCharTypeA
PathIsDirectoryA
SHSetValueA
SHQueryInfoKeyA
PathFileExistsA
SHQueryValueExA
SHDeleteValueA
SHQueryValueExA
SHSetValueA
SHGetValueA
PathIsContentTypeA
PathFileExistsA
SHSetValueA
SHStrDupA
SHQueryInfoKeyA
SHEnumValueA
PathIsContentTypeA
SHSetValueA
SHGetValueA
PathIsDirectoryA
SHQueryInfoKeyA
PathIsDirectoryA
SHDeleteValueA
SHGetValueA
SHDeleteKeyA
SHEnumValueA

oleaut32

VariantCopyInd
SafeArrayUnaccessData
SysAllocStringLen
VariantChangeType
RegisterTypeLib
SysStringLen
SafeArrayGetElement
SysReAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
OleLoadPicture
SysReAllocStringLen
SafeArrayGetUBound
SafeArrayCreate
GetErrorInfo
SysFreeString
SafeArrayCreate
SysStringLen
SysAllocStringLen
SysFreeString
SafeArrayCreate
OleLoadPicture
SafeArrayGetElement
GetErrorInfo
SafeArrayUnaccessData
VariantCopyInd
GetErrorInfo
SysReAllocStringLen
SafeArrayUnaccessData
OleLoadPicture
SysAllocStringLen
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetElement

user32

GetTopWindow
InflateRect
LoadKeyboardLayoutA
GetWindowLongA
ScreenToClient
GetForegroundWindow
ScrollWindow
IntersectRect
DeleteMenu
DrawFrameControl
DrawMenuBar
GetClipboardData
GetDesktopWindow
EnableScrollBar
SetWindowTextA
ReleaseDC
TranslateMDISysAccel
PostMessageA
RegisterClipboardFormatA
ShowWindow
DestroyCursor
SetClipboardData
CharNextA
GetFocus
EnumChildWindows
CreateWindowExA
SendMessageW
EnableScrollBar
DeleteMenu
GetKeyboardType
GetScrollInfo
WaitMessage
CloseClipboard
RemoveMenu
CharUpperBuffA
GetKeyboardLayout
GetWindowThreadProcessId
DrawIcon
BeginPaint
SetWindowsHookExA
IntersectRect
IsWindowUnicode
TrackPopupMenu
DestroyCursor
GetKeyNameTextA
SetForegroundWindow
EnableMenuItem
GetSystemMetrics
UnregisterClassA
DefMDIChildProcA
GetMenuState
OpenClipboard
RegisterClipboardFormatA
GetParent
FrameRect
CreatePopupMenu
GetWindow
IsDialogMessageW
EndPaint
SetWindowPlacement
GetMenuItemID
MessageBoxA
SetScrollPos
DestroyMenu
GetWindowPlacement
InsertMenuA
TranslateMessage
GetMessagePos
GetClipboardData
GetKeyState
ScrollWindow
GetClassInfoA
wsprintfA
OemToCharA
InflateRect
CharUpperBuffA
ChildWindowFromPoint
OffsetRect
MessageBeep
CharNextA
GetMenuItemID
EnableScrollBar
EnumChildWindows
DrawEdge
GetLastActivePopup
DrawTextA
AdjustWindowRectEx
EnumWindows
MapWindowPoints
SendMessageW
SetWindowPos
MoveWindow
GetKeyboardLayout
GetSystemMenu
SetClipboardData
CallWindowProcA
InsertMenuA
DispatchMessageA
GetParent
CharUpperBuffA
ReleaseCapture
SetWindowTextA
LoadKeyboardLayoutA
EnumWindows
GetMenuStringA
GetMenuItemID
GetSysColorBrush
WaitMessage
DrawEdge
GetSysColor
DeleteMenu
ShowScrollBar
DrawTextA
MoveWindow
SystemParametersInfoA
GetKeyboardLayoutList
GetClassNameA
GetDesktopWindow
EqualRect
ShowWindow
IsDialogMessageA
IsDialogMessageA
KillTimer
EqualRect
GetCapture
GetScrollInfo
SetWindowsHookExA
WindowFromPoint
LoadIconA
GetMenuItemCount
SetClassLongA
SetWindowTextA
GetPropA
ChildWindowFromPoint
RegisterClassA
TranslateMDISysAccel
GetClipboardData
MsgWaitForMultipleObjects
GetSubMenu
wsprintfA
GetWindowThreadProcessId
DrawMenuBar
GetActiveWindow
IsIconic
GetDesktopWindow
MoveWindow
CloseClipboard
EqualRect
KillTimer
GetKeyboardLayout
ScreenToClient
GetKeyboardLayoutList
GetClipboardData
GetFocus
MessageBoxA
UnhookWindowsHookEx
DrawEdge
IsRectEmpty
wsprintfA
LoadIconA
GetKeyNameTextA
LoadBitmapA
GetScrollRange
SetMenu
IsChild
GetCursorPos
GetClientRect
GetDC

comctl32

ImageList_Remove
ImageList_Read
ImageList_DrawEx
ImageList_Create
ImageList_Write
ImageList_Destroy
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Draw
ImageList_Create
ImageList_GetBkColor
ImageList_Read
ImageList_Write
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetBkColor
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_DrawEx
ImageList_Draw
ImageList_Add
ImageList_Write

ole32

CoUninitialize
StringFromIID
CoCreateFreeThreadedMarshaler
CoCreateInstanceEx
CoRevokeClassObject
OleRegGetUserType
CreateBindCtx
CoRegisterClassObject
CLSIDFromString
CoUninitialize
CoUnmarshalInterface
CoGetMalloc
CoUninitialize
GetHGlobalFromStream
ReleaseStgMedium
CLSIDFromProgID
CreateStreamOnHGlobal
CoGetContextToken
StgOpenStorage
CreateOleAdviseHolder
CoRegisterClassObject
OleCreateStaticFromData
GetHGlobalFromStream
CoDisconnectObject

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegEnumValueA
RegDeleteKeyA
GetUserNameA
RegLoadKeyA
RegCreateKeyExA
RegDeleteKeyA

kernel32

SetEndOfFile
Sleep
GetTickCount
CreateThread
GetProcAddress
ExitThread
VirtualAlloc
IsBadReadPtr
IsBadHugeReadPtr
GetModuleHandleW
GetCommandLineA
GetModuleHandleA
lstrlenW
GetCommandLineW
LoadLibraryA
ExitProcess
LoadLibraryExA
lstrlenA
GetACP
FindResourceA
SizeofResource
lstrcmpA

shell32

SHFileOperationA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetFileInfoA

gdi32

GetDCOrgEx
CreateBrushIndirect
SetPixel
GetCurrentPositionEx
GetPixel
GetBitmapBits
CreateFontIndirectA
SetTextColor
CreateBitmap
CopyEnhMetaFileA
CreateCompatibleBitmap
SetPixel
GetDIBits
SetTextColor
BitBlt
GetDIBits

comdlg32

GetFileTitleA
GetOpenFileNameA
ChooseColorA
FindTextA

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoSizeA
VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerInstallFileA
VerQueryValueA

msvcrt

mbstowcs
exit
swprintf
atan
tan
exp
swprintf
malloc
atan
srand
cos
wcsncmp
memcmp
exp
wcscspn
malloc
cos
wcsncmp
fabs
strcmp
swprintf
wcscspn
time
pow
pow
memcmp
wcstol

Sections

CODE
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb9ca07b713c16f9b4af91b8a286a353

Headers

File Characteristics

Imports

shlwapi

oleaut32

user32

comctl32

ole32

advapi32

kernel32

shell32

gdi32

comdlg32

version

msvcrt

Sections

CODE Size: 276KB - Virtual size: 276KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 14KB - Virtual size: 13KB

BSS Size: 1024B - Virtual size: 751B

.rsrc Size: 5KB - Virtual size: 5KB

CODE
Size: 276KB - Virtual size: 276KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 14KB - Virtual size: 13KB

BSS
Size: 1024B - Virtual size: 751B

.rsrc
Size: 5KB - Virtual size: 5KB