NEAS[.]79614e7a96271e1a5fda15f574a5f540[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.79614e7a96271e1a5fda15f574a5f540.exe
Size

66KB
MD5

79614e7a96271e1a5fda15f574a5f540
SHA1

7833439e32b32fc10692cdffbc931619ffb14a3b
SHA256

4173c34445c4070463292bc9a925b026bbf623d72204208908649c48439d2065
SHA512

12f0681ed9d2459087b60be7403901b663a4c3adf0d64f480c2f7167549f626a865c8b972f4f0f437ffde6b365f2506cb6ff9bf8413a7454c8e243226d1eab05
SSDEEP

1536:3SZ/Wn0vPMI048PcaXfD/+Wm/tEJtSxWtp5p3ajQyGAOTU7:3SZ/Wne+7Whs5VajtGAOY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.79614e7a96271e1a5fda15f574a5f540.exe

Files

NEAS.79614e7a96271e1a5fda15f574a5f540.exe
.exe windows:4 windows x86

2f728746dff148dbe621d6aef61c2391

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
LocalFree
GlobalWire
PulseEvent
EnumResourceLanguagesW
GetConsoleAliasExesW
GetNamedPipeClientComputerNameA
CreateMutexA
SetConsoleHistoryInfo
Basep8BitStringToDynamicUnicodeString

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE