NEAS[.]f19751cf19aa1dd0d80eff8b257d7100_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f19751cf19aa1dd0d80eff8b257d7100_JC.exe
Size

4.4MB
MD5

f19751cf19aa1dd0d80eff8b257d7100
SHA1

f843806240b5e54150ae6813a724d40b52a60f5c
SHA256

e1348d511bed174b0310d02725d86ca812709f63ce8b2ebbe1de98ed102679d9
SHA512

cd245970647d557bac945b03ae4ecd984897915e2bd1155e986afee801855c8af2dbd19446186379cb287de076ff72c1d37da31840a3eeca873ffbed1e3f96ec
SSDEEP

49152:PFMZ2GD6XLGtX0bLwlTr8Bd1y7q0VlrkTqOrWQrycR3Ovzf+7YOYnPCOqoAmAjIW:P2xDGa10b08Bd1KLOaQHtRyBg+aKLkHJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f19751cf19aa1dd0d80eff8b257d7100_JC.exe

Files

NEAS.f19751cf19aa1dd0d80eff8b257d7100_JC.exe
.exe windows:5 windows x86

d0641af37ee8a5c0bf1d772610c9f74b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

midiStreamProperty

ws2_32

WSAAsyncSelect

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

kernel32

LocalFree

user32

PostThreadMessageA

gdi32

CreateDCA

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoRevokeClassObject

oleaut32

VariantInit

comctl32

ImageList_Read

oledlg

ord8

wldap32

ord29

msvcrt

strncpy

psapi

GetMappedFileNameW

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0641af37ee8a5c0bf1d772610c9f74b

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

msvfw32

avifil32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wldap32

msvcrt

psapi

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.sedata Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.sedata
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB