NEAS[.]76795133cbb35de682d9820fb1dc4760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.76795133cbb35de682d9820fb1dc4760.exe
Size

7KB
MD5

76795133cbb35de682d9820fb1dc4760
SHA1

79fe81c05d9c14705069f396b24457b492d46a0d
SHA256

97a224a0a5ddcf50e14729b3dfc2e519a10c5f4073afdb2ebb46c7506a7f6f32
SHA512

a60e16ca9909f658fa3e23ae3b0e6149754b28bc15df4799a810e8362760df2712e652fb4954dee87533ac99d46c2239f59cfb5fafbefa8239afafeb7ec264bd
SSDEEP

192:SiPKu4dEM4EEqPF/EkeJeH+l+HxJU9kAhqaa:RIC5qPF/EkeJeH+l2UOAhqaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.76795133cbb35de682d9820fb1dc4760.exe

Files

NEAS.76795133cbb35de682d9820fb1dc4760.exe
.exe windows:4 windows x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE