NEAS[.]ab89327013acd6faf03c18763a154c40_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ab89327013acd6faf03c18763a154c40_JC.exe
Size

1.1MB
MD5

ab89327013acd6faf03c18763a154c40
SHA1

1399920f193cac7f96f7d3a9f9f14db5b0bda982
SHA256

845a0ea2295164228b35d7fca1561b11cd5a8cd5c53e7830a6417987b54457bf
SHA512

3a491adb04b61945434d6f1f709c5a298c4cc98320d8d144583d5fe9fe3aa755a698137032146f5e7a87c764da6378ed0fe82e93f2d6d5a1971e78c9c70fb87a
SSDEEP

24576:BzJcU2+gtvvkECK7frnI4KjbA1N3RUDHNmdPCAaq8Nozgi/rE0TOj:BzJF2+gvVrnITjE8HNUPCAaq8Wdo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ab89327013acd6faf03c18763a154c40_JC.exe

Files

NEAS.ab89327013acd6faf03c18763a154c40_JC.exe
.exe windows:4 windows x86

341ad42f1c1323de5177f7ee5eace0b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString

user32

CharLowerA
CharNextA
CharUpperW
CharLowerW
CharPrevExA
CharUpperA

kernel32

SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
SetConsoleMode
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryW
LoadLibraryA
GetModuleFileNameW
GetModuleFileNameA
LocalFree
FormatMessageW
FormatMessageA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesW
SetFileAttributesA
RemoveDirectoryW
RemoveDirectoryA
MoveFileW
MoveFileA
CreateDirectoryW
CreateDirectoryA
DeleteFileW
DeleteFileA
GetFullPathNameW
GetFullPathNameA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetTempPathW
GetTempPathA
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindFirstFileA
FindNextFileW
FindNextFileA
CreateFileA
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetCurrentProcess
GetProcAddress
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetProcessTimes
LocalFileTimeToFileTime
QueryPerformanceCounter
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
LCMapStringA

Sections

.text
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

341ad42f1c1323de5177f7ee5eace0b4

Headers

File Characteristics

Imports

oleaut32

user32

kernel32

Sections

.text Size: 482KB - Virtual size: 481KB

.rdata Size: 62KB - Virtual size: 61KB

.data Size: 26KB - Virtual size: 52KB

.sxdata Size: 512B - Virtual size: 4B

.rsrc Size: 568KB - Virtual size: 572KB

.text
Size: 482KB - Virtual size: 481KB

.rdata
Size: 62KB - Virtual size: 61KB

.data
Size: 26KB - Virtual size: 52KB

.sxdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 568KB - Virtual size: 572KB