NEAS[.]74ae2c28f6fcfddd3393c6fdcbca3e80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.74ae2c28f6fcfddd3393c6fdcbca3e80.exe
Size

79KB
MD5

74ae2c28f6fcfddd3393c6fdcbca3e80
SHA1

765f844995696be3eb6a4b315ccd8e430ec67512
SHA256

872fb05140be424e2be64ff054fcb52ba5a25230b4c4f02a54a299cc84e5cc35
SHA512

bd77c0faea38ca4a7fcb5c0fd26722b93d4f19d4c6dd6b89273c174f873d36a4f58a99dcce59574f8b1bbee11238b4f7d98987c2e2aabd4de0f28c580a3724a8
SSDEEP

1536:zxnhmuHsywOKwrDuLh62SzC0mi9My0jFgIa1NqGybJyjXiiUAg3Bg0:VA+lwIlzYiSJ0N8ojXiiuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.74ae2c28f6fcfddd3393c6fdcbca3e80.exe

Files

NEAS.74ae2c28f6fcfddd3393c6fdcbca3e80.exe
.exe windows:4 windows x86

f7d7aebc53da63d60a50b5993b57877a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

wsock32

send

Sections

.
Size: 28KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ