NEAS[.]dd857718d360c49d062378b7cd4b65a0_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.dd857718d360c49d062378b7cd4b65a0_JC.exe
Size

5.7MB
MD5

dd857718d360c49d062378b7cd4b65a0
SHA1

3b03be8f48f78327898e7ce36487d6f9fe044af1
SHA256

1c44956c7224790099152eed1e19e4763bf3680970aba729288ee3d2d1b3b4e6
SHA512

196126ff1cb8e0af706e1d313762f4546104965feae7341dc7bc0495bfa9b5d5c14496d6ad34aad54469514ce9a12cd00ae47336dca120a7406be05a14e3601f
SSDEEP

98304:ubC+4z0slBOk/RhsrmMLtlStnepQK0E0vjaINyHmcjxUZzt1qndyuc7e4N8q8TmG:7YsCk/E3JwhepQv5v+INLcjyKyTe4Nib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dd857718d360c49d062378b7cd4b65a0_JC.exe

Files

NEAS.dd857718d360c49d062378b7cd4b65a0_JC.exe
.exe windows:4 windows x86

6451a38002e74e12c425c360db1956b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
RtlUnwind
GetProcAddress
HeapAlloc
HeapFree

user32

CharLowerBuffA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey

ole32

CoGetClassObject
CoCreateInstanceEx
CoRegisterClassObject

Sections

.text
Size: 436KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 53KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 67KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6451a38002e74e12c425c360db1956b4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 436KB - Virtual size: 861KB

.itext Size: 2KB - Virtual size: 2KB

.data Size: 27KB - Virtual size: 26KB

.bss Size: - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 13KB

.tls Size: - Virtual size: 52B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 53KB

.rsrc Size: 3.8MB - Virtual size: 3.8MB

.adata Size: 67KB - Virtual size: 114KB

.text
Size: 436KB - Virtual size: 861KB

.itext
Size: 2KB - Virtual size: 2KB

.data
Size: 27KB - Virtual size: 26KB

.bss
Size: - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 13KB

.tls
Size: - Virtual size: 52B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 53KB

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

.adata
Size: 67KB - Virtual size: 114KB