NEAS[.]01b6252331da9e0a1ad53df6cb479420_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01b6252331da9e0a1ad53df6cb479420_JC.exe
Size

232KB
MD5

01b6252331da9e0a1ad53df6cb479420
SHA1

861b78fdc440273fef833a6e0bfcbd60f6e1e22e
SHA256

5224f954219d2769376485b616c0e33d2f6b1373f8356380545ca5ff5eb503fb
SHA512

d9dd132a308cea6d3f5c719a5397e6e44e789794d12188e386e85e8ebc8df2cc6215fe13e87bc6b1c35605b8f949061c19517822e12b3b28d0dea4c67d6b8521
SSDEEP

3072:qNYBoJXEw57qtFMtYZfXi4FueprcFh22qcVODSSFP+Ij6HF2llK2+7LDRj1nlObd:Z+XEw57OyR+KF2WX7fRj1nHSsQLH5Ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01b6252331da9e0a1ad53df6cb479420_JC.exe

Files

NEAS.01b6252331da9e0a1ad53df6cb479420_JC.exe
.exe windows:4 windows x86

9577bfbcdcaa55cde98c2976b7ced8d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateEventA
SetWaitableTimer
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateWaitableTimerA
SetEvent
GetSystemInfo
GetLastError
CompareStringW
CompareStringA
GetLocaleInfoA
VirtualProtect
LCMapStringW
LCMapStringA
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
VirtualQuery
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
CreateFileA
VirtualAlloc
HeapReAlloc
IsBadCodePtr
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetModuleHandleA
DebugBreak
RaiseException
GetProcAddress
LoadLibraryA
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
WideCharToMultiByte
GetTimeZoneInformation
CloseHandle
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
GetProcessHeap
FreeLibrary
SetFilePointer
SetEnvironmentVariableA

user32

MessageBoxA

winmm

timeGetTime

ws2_32

bind
listen
select
__WSAFDIsSet
accept
recv
send
socket
WSAStartup
connect
closesocket
WSAWaitForMultipleEvents
WSAGetLastError
htonl
htons
inet_ntoa
ntohs
ntohl
sendto
setsockopt
recvfrom
inet_addr

Sections

.textbss
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 193.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9577bfbcdcaa55cde98c2976b7ced8d7

Headers

File Characteristics

Imports

kernel32

user32

winmm

ws2_32

Sections

.textbss Size: - Virtual size: 67KB

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 193.0MB

.idata Size: 44KB - Virtual size: 41KB

.textbss
Size: - Virtual size: 67KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 193.0MB

.idata
Size: 44KB - Virtual size: 41KB