NEAS[.]2065462ababf7acf8699cbac38348fc0_JC[.]exe

General

Target

NEAS.2065462ababf7acf8699cbac38348fc0_JC.exe
Size

79KB
MD5

2065462ababf7acf8699cbac38348fc0
SHA1

33477c87cf404c807bfa199be0ca661c74d3ac0a
SHA256

2521b4085aec911541f436596d88349aea6bbb8215fb36a3f02ded22977010aa
SHA512

a2a1b7a95502b625932ea6e7c8dbb604d165aba532f2c5f7461c1ad3ac7aa4125c030bd9684e77b64fbd8563e1ba04ce785f4b5fa03e9a30abf7a428d40592b3
SSDEEP

1536:TdC/8bD9ioO2GIhEtBUTP7QPr9zi53G/9MRSeefBqyMMDBtt97P:Bqu9xOc46UrBijjs0yMoDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2065462ababf7acf8699cbac38348fc0_JC.exe

Files

NEAS.2065462ababf7acf8699cbac38348fc0_JC.exe
.exe windows:4 windows x86

7f4b4d0f8438df86be751dcd98624637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
FreeLibrary
SetEvent
WaitForSingleObject
CloseHandle
CreateThread
CreateEventW
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

msvcp71

?_Nomemory@std@@YAXXZ

iphlpapi

GetAdaptersInfo

ws2_32

WSACleanup
connect
recv
listen
WSAStartup
send
socket
setsockopt
recvfrom
WSCEnumProtocols
WSCGetProviderPath
accept
closesocket
bind
htons
inet_addr
sendto

msvcr71

_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
??_V@YAXPAX@Z
rand
srand
time
strncmp
malloc
_callnewh
__security_error_handler
_except_handler3
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___winitenv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f4b4d0f8438df86be751dcd98624637

Headers

File Characteristics

Imports

kernel32

msvcp71

iphlpapi

ws2_32

msvcr71

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 176B

.rsrc Size: 65KB - Virtual size: 68KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 176B

.rsrc
Size: 65KB - Virtual size: 68KB