NEAS[.]221ebf55847330b6567898ec36eef330_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.221ebf55847330b6567898ec36eef330_JC.exe
Size

4.0MB
MD5

221ebf55847330b6567898ec36eef330
SHA1

23fd9d28b8e6b33a53e0df1acc6139d5ce7cb852
SHA256

d4501f9e15c430e88235bd2cfc48886f18ca6f9864bfb3e71693f2e9a239f37a
SHA512

eb0da10ecb88b14e765c29d49db84ee9d0daa5393ccd3236f225a5a01eb6c41f3e5b5ddf1cf6d23b751528cc3beb4e44b7c8ce4bb7ff0ca786640adbce32fb70
SSDEEP

98304:11+YsW3HLeVIzuf/r1N/ToXxgm3YQ3okyvwNVy31:11eW3LQIzcrvLoBj/okyvJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.221ebf55847330b6567898ec36eef330_JC.exe

Files

NEAS.221ebf55847330b6567898ec36eef330_JC.exe
.dll windows:4 windows x86

a24bdda400a413aa6d759d0b8e02ddd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
GetTimeZoneInformation
Sleep
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
LCMapStringA
LCMapStringW
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

WXMPIterator_DecrementRefCount_1
WXMPIterator_IncrementRefCount_1
WXMPIterator_Next_1
WXMPIterator_PropCTor_1
WXMPIterator_Skip_1
WXMPIterator_TableCTor_1
WXMPIterator_Unlock_1
WXMPMeta_AppendArrayItem_1
WXMPMeta_CTor_1
WXMPMeta_Clone_1
WXMPMeta_CountArrayItems_1
WXMPMeta_DecrementRefCount_1
WXMPMeta_DeleteAlias_1
WXMPMeta_DeleteArrayItem_1
WXMPMeta_DeleteNamespace_1
WXMPMeta_DeleteProperty_1
WXMPMeta_DeleteQualifier_1
WXMPMeta_DeleteStructField_1
WXMPMeta_DoesArrayItemExist_1
WXMPMeta_DoesPropertyExist_1
WXMPMeta_DoesQualifierExist_1
WXMPMeta_DoesStructFieldExist_1
WXMPMeta_DumpAliases_1
WXMPMeta_DumpNamespaces_1
WXMPMeta_DumpObject_1
WXMPMeta_DumpPropertyTraits_1
WXMPMeta_GetArrayItem_1
WXMPMeta_GetGlobalOptions_1
WXMPMeta_GetLocalizedText_1
WXMPMeta_GetMemProcs_1
WXMPMeta_GetNamespacePrefix_1
WXMPMeta_GetNamespaceURI_1
WXMPMeta_GetObjectName_1
WXMPMeta_GetObjectOptions_1
WXMPMeta_GetProperty_1
WXMPMeta_GetProperty_Bool_1
WXMPMeta_GetProperty_Date_1
WXMPMeta_GetProperty_Float_1
WXMPMeta_GetProperty_Int64_1
WXMPMeta_GetProperty_Int_1
WXMPMeta_GetQualifier_1
WXMPMeta_GetStructField_1
WXMPMeta_GetVersionInfo_1
WXMPMeta_IncrementRefCount_1
WXMPMeta_Initialize_1
WXMPMeta_MarkStaleProperties_1
WXMPMeta_ParseFromBuffer_1
WXMPMeta_RegisterAlias_1
WXMPMeta_RegisterAssertNotify_1
WXMPMeta_RegisterNamespace_1
WXMPMeta_RegisterPropertyTraits_1
WXMPMeta_RegisterStandardAliases_1
WXMPMeta_ResolveAlias_1
WXMPMeta_SendAssertNotify_1
WXMPMeta_SerializeToBuffer_1
WXMPMeta_SetArrayItem_1
WXMPMeta_SetGlobalOptions_1
WXMPMeta_SetLocalizedText_1
WXMPMeta_SetObjectName_1
WXMPMeta_SetObjectOptions_1
WXMPMeta_SetProperty_1
WXMPMeta_SetProperty_Bool_1
WXMPMeta_SetProperty_Date_1
WXMPMeta_SetProperty_Float_1
WXMPMeta_SetProperty_Int64_1
WXMPMeta_SetProperty_Int_1
WXMPMeta_SetQualifier_1
WXMPMeta_SetStructField_1
WXMPMeta_Terminate_1
WXMPMeta_UnlockObject_1
WXMPMeta_Unlock_1
WXMPMeta_UnregisterAssertNotify_1
WXMPUtils_AddEmbeddedDocument_1
WXMPUtils_AppendProperties_1
WXMPUtils_CatenateArrayItems_1
WXMPUtils_ClearManifest_1
WXMPUtils_CollectMultiFileXMP_1
WXMPUtils_CompareDateTime_1
WXMPUtils_ComposeArrayItemPath_1
WXMPUtils_ComposeFieldSelector_1
WXMPUtils_ComposeLangSelector_1
WXMPUtils_ComposeQualifierPath_1
WXMPUtils_ComposeStructFieldPath_1
WXMPUtils_ConvertFromBool_1
WXMPUtils_ConvertFromDate_1
WXMPUtils_ConvertFromFloat_1
WXMPUtils_ConvertFromInt64_1
WXMPUtils_ConvertFromInt_1
WXMPUtils_ConvertToBool_1
WXMPUtils_ConvertToDate_1
WXMPUtils_ConvertToFloat_1
WXMPUtils_ConvertToInt64_1
WXMPUtils_ConvertToInt_1
WXMPUtils_ConvertToLocalTime_1
WXMPUtils_ConvertToUTCTime_1
WXMPUtils_CurrentDateTime_1
WXMPUtils_DecodeFromBase64_1
WXMPUtils_DistributeMultiFileXMP_1
WXMPUtils_DuplicateSubtree_1
WXMPUtils_EncodeToBase64_1
WXMPUtils_GetDateRange_1
WXMPUtils_GetMergedListPath_1
WXMPUtils_HasContainedDoc_1
WXMPUtils_InitializeDerivedDocument_1
WXMPUtils_InitializeNewDocument_1
WXMPUtils_IsPropertyMultiValued_1
WXMPUtils_MergeFromJPEG_1
WXMPUtils_OpenWorkingDocument_1
WXMPUtils_PackageForJPEG_1
WXMPUtils_RemoveEmbeddedDocument_1
WXMPUtils_RemoveMultiValueInfo_1
WXMPUtils_RemoveProperties_1
WXMPUtils_SaveWorkingDocument_1
WXMPUtils_SeparateArrayItems_1
WXMPUtils_SetAppName_1
WXMPUtils_SetMIMEMapping_1
WXMPUtils_SetTimeZone_1
WXMPUtils_UnlockIter_1
WXMPUtils_Unlock_1
WXMPUtils_UpdateEmbeddedDocument_1

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a24bdda400a413aa6d759d0b8e02ddd9

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 276KB - Virtual size: 273KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 20KB - Virtual size: 18KB

.text Size: 168KB - Virtual size: 168KB

.text
Size: 276KB - Virtual size: 273KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 20KB - Virtual size: 18KB

.text
Size: 168KB - Virtual size: 168KB