NEAS[.]79d28ad6c019d10804a7baa0fbbd85d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.79d28ad6c019d10804a7baa0fbbd85d0.exe
Size

66KB
MD5

79d28ad6c019d10804a7baa0fbbd85d0
SHA1

65c7d319017631b360069e23df3fa29a53391664
SHA256

a4df6a123f6e54c8cb5cadf53278bb4e21876c1e6207f8f2c7ae900b1fca42cb
SHA512

059d1366f803bbbc2f02876e29b18fffe87571bfb2e36b08b08cdc95a15b294a19d9e9b6c0a464a5dd3ab8c7a2f59214329344d6dc9559d651b69290b5d86d3f
SSDEEP

1536:b7UPUSby3CANUn8DizPZ4AZ3oXMqFTIXP5JMyxRl+:0PUSbFA2fP5ZUFTaPHl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.79d28ad6c019d10804a7baa0fbbd85d0.exe

Files

NEAS.79d28ad6c019d10804a7baa0fbbd85d0.exe
.exe windows:4 windows x86

ec1d7867382903303f4252aef55ae17d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeA
WaitNamedPipeA
TrySubmitThreadpoolCallback
GetBinaryType
SetFilePointer
GetProcessIdOfThread
lstrcmpi
RegUnLoadKeyA
SetComputerNameEx2W
EncodePointer
RegisterWaitForSingleObjectEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE