NEAS[.]edecc6c225841d7e46ec876ccb39ca40[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.edecc6c225841d7e46ec876ccb39ca40.exe
Size

888KB
MD5

edecc6c225841d7e46ec876ccb39ca40
SHA1

022c4696e95530cf7c7db2ef4e3a2bf0e81b0102
SHA256

f9645b77f8ea5c21052a217778d1e2aeaca2462a964d89fbf223dcbd9f5a4219
SHA512

ac25f0781a83fc3f02e2ecaf46689ca0e9a36a9750ffd8f26cd2645d7493a3e5cef1dc18f903f4fe00db70c41e78668d959967d5a6d782782c507573b0d2b113
SSDEEP

24576:LmX7ZuvgYRnedEaLHTnYLYAqSsxuY2BwVI:aLUvgYn6LHpAhsxuYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.edecc6c225841d7e46ec876ccb39ca40.exe

Files

NEAS.edecc6c225841d7e46ec876ccb39ca40.exe
.exe windows:4 windows x86

e93e852a5042281992f6f5ec4babb4b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

closesocket
gethostname

kernel32

GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
SetCurrentDirectoryA
SystemTimeToFileTime
GetLocalTime
GetStdHandle
GetVersionExA
WaitForSingleObject
GenerateConsoleCtrlEvent
WaitForMultipleObjects
SetEnvironmentVariableA
AllocConsole
CreateEventA
SetEvent
SetErrorMode
SetHandleInformation
Sleep
ResetEvent
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
GetEnvironmentVariableW
GetTickCount
GetProcessTimes
GetCurrentProcess
ReleaseMutex
CreateMutexA
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetVolumeInformationA
GetDriveTypeA
VirtualAlloc
VirtualFree
SetLastError
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateFileA
ReadFile
WriteFile
DeviceIoControl
HeapAlloc
ExitProcess
GetTimeZoneInformation
GetSystemTime
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetFileAttributesA
GetFullPathNameA
HeapFree
HeapReAlloc
GetCurrentProcessId
SetFileAttributesA
InterlockedIncrement
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetFileType
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
MoveFileA
MoveFileW
GetFileAttributesW
DeleteFileW
DuplicateHandle
LoadLibraryA
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
SetHandleCount
SetFilePointer
UnhandledExceptionFilter
GetCurrentThreadId
TlsAlloc
TlsGetValue
SetStdHandle
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetEnvironmentVariableW
SetEndOfFile
GetFullPathNameW
GetStringTypeA
GetStringTypeW
CreatePipe
HeapSize
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
GetCurrentDirectoryW
GetProcAddress
FreeLibrary
GetVersion
GetStartupInfoA
GetStartupInfoW
GetExitCodeProcess
GetCommandLineA
CreateProcessA
GetCommandLineW
CreateProcessW
GetLastError
CloseHandle
GetWindowsDirectoryA
SetConsoleTitleA
SetConsoleCtrlHandler
TerminateProcess
InterlockedDecrement
GetModuleFileNameA

user32

GetClientRect
wsprintfA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
SetWindowTextA
SetFocus
GetFocus
GetParent
EndDialog
ScreenToClient
GetDlgItemTextW
SetDlgItemTextA
MessageBeep
GetWindowLongA
SendMessageA
GetDlgItem
GetWindowRect
EnableWindow
GetSystemMetrics
GetActiveWindow
MessageBoxA
MoveWindow
GetDlgItemTextA
ShowWindow

advapi32

SetServiceStatus
GetUserNameW
StartServiceCtrlDispatcherA
RegCloseKey
RegOpenKeyExA
RegisterServiceCtrlHandlerA
RegQueryValueExA
RegisterEventSourceA
DeregisterEventSource
ReportEventA
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
GetUserNameA
RegEnumKeyExA

netapi32

Netbios

comctl32

ord17

comdlg32

GetOpenFileNameA

Sections

.text
Size: 712KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT_HA
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e93e852a5042281992f6f5ec4babb4b8

Headers

File Characteristics

Imports

wsock32

kernel32

user32

advapi32

netapi32

comctl32

comdlg32

Sections

.text Size: 712KB - Virtual size: 708KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 72KB - Virtual size: 133KB

_TEXT_HA Size: 68KB - Virtual size: 66KB

.rsrc Size: 4KB - Virtual size: 872B

.text
Size: 712KB - Virtual size: 708KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 72KB - Virtual size: 133KB

_TEXT_HA
Size: 68KB - Virtual size: 66KB

.rsrc
Size: 4KB - Virtual size: 872B