NEAS[.]78c9725beb1998bc130361cffe0e28f0[.]exe | Triage

Sharing

General

Target

NEAS.78c9725beb1998bc130361cffe0e28f0.exe
Size

61KB
MD5

78c9725beb1998bc130361cffe0e28f0
SHA1

064b128a9594df01fd4c8f08bc49761dec5de9a2
SHA256

d31a76eab7febef02c31d2203d17394ae01a69cb00f48fa4c2fef364016e018f
SHA512

055621dc930c53510edb96b39feba56dfff7543003a7ac6e5044f41ac57125e897cebc4f91b4e50b85035388c0b9110f6a1219456a2bd9f403e8def6239a6291
SSDEEP

1536:zxnhmuHsywOKwrDuLh+dlyZH+8y1iD0Ph:VA+lwesH+8y1iAPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.78c9725beb1998bc130361cffe0e28f0.exe

Files

NEAS.78c9725beb1998bc130361cffe0e28f0.exe
.exe windows:4 windows x86

f7d7aebc53da63d60a50b5993b57877a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

wsock32

send

Sections

.
Size: 28KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ