NEAS[.]edcd92809152f62231e2e7fd20531f70[.]exe

General

Target

NEAS.edcd92809152f62231e2e7fd20531f70.exe
Size

60KB
MD5

edcd92809152f62231e2e7fd20531f70
SHA1

e126fe07f70370fffdb223f2936aecc68e24e83d
SHA256

b4e881479bbf4b3def1984c1d3991953bef1b0c5ef8c4a0e4c7da730b823b919
SHA512

d42de193b37b0edef711c08b81292f2e45e1adf8fc61105b79d348f955388876f2f3c56b983104ef920a21895994d2f5e22258799d8588614a5fb3ad440aaba1
SSDEEP

768:KHgRYXTrgS3r5DhN1HSt3aWmGM+LM/b3okZqk54de25mO3t6UOYuOoTXB3q:tRYdNDtHStK3ToCFoe25vrhoTBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.edcd92809152f62231e2e7fd20531f70.exe

Files

NEAS.edcd92809152f62231e2e7fd20531f70.exe
.exe windows:4 windows x86

9157ddcae853e4091dadd23af4ab7045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

kernel32

VirtualAlloc
SetHandleCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetShortPathNameW
WideCharToMultiByte
FindClose
FindFirstFileA
FindNextFileA
GetLastError
CreateDirectoryA
GetModuleFileNameA
UnmapViewOfFile
CloseHandle
MapViewOfFile
GetSystemInfo
CreateFileMappingA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DuplicateHandle
GetCurrentProcess
MoveFileA
DeleteFileA
HeapReAlloc
SetStdHandle
GetFileType
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
MultiByteToWideChar
TerminateProcess
GetCPInfo
GetStdHandle
GetStartupInfoA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
WriteFile
FlushFileBuffers
SetFilePointer
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
ReadFile
CreateFileA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
SetEndOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
CreateProcessA
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9157ddcae853e4091dadd23af4ab7045

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 10KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 10KB