NEAS[.]51ccad1f91fed938718c735536a512b0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.51ccad1f91fed938718c735536a512b0_JC.exe
Size

3.3MB
MD5

51ccad1f91fed938718c735536a512b0
SHA1

0340f8c4c7066bbb7625cc2fd605b4dbab52ba34
SHA256

7d6aec3e7717d44120c2e9321ad81815a1a054103d9c4070f5b94bf799309a72
SHA512

6b543023633571a984ad0adccd890f9bd11a35d81e35b11b351daaebeb73b805b3bc33fe724f3208c3da4b3372dc09b23618ddbd27b1a7368c7fa37a52185df1
SSDEEP

98304:shAnDy1GGDuFufVtW+xjbXFdVkZrGZf9OGnE5R585t2LTZ:jD5GvPxjnKZuC5R65e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.51ccad1f91fed938718c735536a512b0_JC.exe

Files

NEAS.51ccad1f91fed938718c735536a512b0_JC.exe
.exe windows:5 windows x86

f1824c23021bb9324ae05693ee7dd943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo

user32

GetMenu

gdi32

SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegEnumKeyExA

shell32

DragQueryFileA

comctl32

_TrackMouseEvent

shlwapi

PathCompactPathA

oledlg

ord8

ole32

CLSIDFromString

oleaut32

SysStringByteLen

ws2_32

inet_ntoa

gdiplus

GdipLoadImageFromFile

psapi

EnumProcesses

winmm

PlaySoundA

version

GetFileVersionInfoSizeA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

Sections

.text
Size: 1.3MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 198KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1824c23021bb9324ae05693ee7dd943

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

gdiplus

psapi

winmm

version

msvcrt

iphlpapi

Sections

.text Size: 1.3MB - Virtual size: 3.0MB

.sedata Size: 1.8MB - Virtual size: 1.8MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 198KB - Virtual size: 200KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 3.0MB

.sedata
Size: 1.8MB - Virtual size: 1.8MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 198KB - Virtual size: 200KB

.sedata
Size: 4KB - Virtual size: 4KB