NEAS[.]77b67a55860e3b4cd73d52f91b58b350_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.77b67a55860e3b4cd73d52f91b58b350_JC.exe
Size

612KB
MD5

77b67a55860e3b4cd73d52f91b58b350
SHA1

88a406462aa11299fc3ebc7a0db367ab8a312945
SHA256

9ca32478c5f360d1fa9766ddc3d2380903429a9037d74316abb48010b1514ff3
SHA512

9822a79370230652a92f6c60bebe7f30725032b597a61f1285edc7e100fe34e6caf261d8990ca11c6c43fb96320dfc4b2cd05095466315e140f9b88348c841ed
SSDEEP

6144:m3kFu5mL4UOpVUmpDHeVshhuhdQi3lVnwX8S7k26KZX5Xqs51dO9Ed0V8CS3/Aqa:m3aOtqQ8jnnS7k26ex35HT22NJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.77b67a55860e3b4cd73d52f91b58b350_JC.exe

Files

NEAS.77b67a55860e3b4cd73d52f91b58b350_JC.exe
.dll windows:6 windows x64

6dc6b7f870caff4f062a91aa4f847732

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcrt

??0exception@@QEAA@XZ
strtok
_itow
wcspbrk
_vscprintf
??0exception@@QEAA@AEBQEBD@Z
_wtoi
_wtol
modff
_vscwprintf
wcstok
_wcsnset
modf
_vsnwprintf
wcschr
wcsrchr
wcsncmp
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
ferror
wctomb
_itoa
_snprintf
_iob
isleadbyte
__mb_cur_max
mbtowc
sqrt
sin
cos
ceil
floor
memmove
memset
memcpy
??1type_info@@UEAA@XZ
_onexit
_lock
__dllonexit
_unlock
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_callnewh
malloc
_CxxThrowException
free
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
wcsstr
_purecall
_wcsupr
_errno
__CxxFrameHandler
atoi
_stricmp
wcstombs
_vsnprintf
_wcsnicmp
_wcsicmp
atan
asin

kernel32

CloseHandle
SystemTimeToFileTime
GetSystemTime
FindResourceW
SizeofResource
GetVersionExA
RaiseException
LockResource
HeapReAlloc
HeapDestroy
CreateProcessA
lstrcmpiA
lstrcmpA
GetComputerNameA
ExpandEnvironmentStringsA
GetFileSize
SetFilePointer
ReadFile
WriteFile
CreateFileW
FreeLibrary
GetLastError
SetLastError
GetModuleFileNameW
LoadLibraryW
MulDiv
GetLocalTime
VirtualProtect
Sleep
lstrlenA
GetComputerNameW
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadResource
FindResourceExW
GetSystemDefaultUILanguage
lstrcmpW
GetTimeFormatW
GetDateFormatW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
HeapFree
GetProcessHeap
HeapAlloc
GetSystemDefaultLangID
lstrlenW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
DeleteCriticalSection

user32

UnregisterClassA
FillRect
SetRect
LoadStringW
CharUpperBuffA

winspool.drv

EnumFormsW
GetPrinterDataExW
SetPrinterDataW
ClosePrinter
OpenPrinterW
EnumPrinterDataW
GetJobA
GetPrinterDriverW
GetPrinterW
DeletePrinterDataW
GetPrinterDataW
WritePrinter
GetJobW
GetPrinterA

advapi32

RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
GetUserNameW
RegEnumValueW

gdi32

GetDeviceCaps
GetWorldTransform
SetWorldTransform
DPtoLP
SaveDC
SetMapMode
CreateCompatibleDC
GetDIBits
CreateBitmap
SelectObject
CreateSolidBrush
CreateRectRgn
SelectClipRgn
SetTextColor
SetBkMode
CreateFontIndirectW
SetGraphicsMode
GetTextExtentPoint32W
BeginPath
TextOutW
EndPath
CreatePenIndirect
DeleteDC
RestoreDC
DeleteObject
StrokePath

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc

oleaut32

SysAllocString
VariantClear
SysFreeString
VariantInit

shlwapi

StrStrIW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dc6b7f870caff4f062a91aa4f847732

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

winspool.drv

advapi32

gdi32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 537KB - Virtual size: 537KB

.data Size: 40KB - Virtual size: 42KB

.pdata Size: 24KB - Virtual size: 24KB

.rsrc Size: 1024B - Virtual size: 976B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 537KB - Virtual size: 537KB

.data
Size: 40KB - Virtual size: 42KB

.pdata
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 8KB - Virtual size: 7KB