NEAS[.]79f7c9976d94b597ef9cec6780cf40c0[.]exe | Triage

Sharing

General

Target

NEAS.79f7c9976d94b597ef9cec6780cf40c0.exe
Size

279KB
MD5

79f7c9976d94b597ef9cec6780cf40c0
SHA1

24f774232a3074a891611876600507490f69e3b9
SHA256

12c1978f46aacf94582f319bc3379f3bfab041b2519ad5a73e63f8a96943bc16
SHA512

693c916f258da870c5507dbf2ac5328e50514fb8bc8571ee9cf04bb621c58b8a2c4bda301c38c139eeda0c0c38f15ab7287844334d52601d8cfc03efdd41db81
SSDEEP

6144:m7OQ0l65RAHqjeEnoz5OEKS64y5eUSqX5kdpfkQr7ZBfE9M:m7lRGgdoz5LDsOddkUBc9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.79f7c9976d94b597ef9cec6780cf40c0.exe

Files

NEAS.79f7c9976d94b597ef9cec6780cf40c0.exe
.exe windows:4 windows x86

1c44c48baf58f4cf1f4d3a2bec983a53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

kernel32

UnhandledExceptionFilter
AddAtomA
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
EnumResourceLanguagesA
WriteFile
GetNumberFormatA
GetStartupInfoA
GetEnvironmentStringsW
GetCPInfo
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

EnumChildWindows
GetDlgItem
DestroyWindow
CreateWindowExW
SendMessageA
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 142KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ