NEAS[.]aa749c6dca9f74dbabf59e16bcfa6b60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aa749c6dca9f74dbabf59e16bcfa6b60.exe
Size

66KB
MD5

aa749c6dca9f74dbabf59e16bcfa6b60
SHA1

0d74c48570d61cffd213616e78db753fb5c40063
SHA256

27818114cf8060cd1d060c785fa76adf9fcea9739249413214998fcbb6bff44e
SHA512

b61e9b22d26a3146ab1b79aea9bc14f000df6eefaa9c215e4ddfd29ba4e7a79739b2d71b80b6f7f8dd91b923f7b823eb82f1f37b746572419c009b1d7b3346e9
SSDEEP

1536:kWgBoa0vdIfAo9ws6WM8GOLiahQd732JzVlXaIA:e0FIfNuOLV6oPcIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aa749c6dca9f74dbabf59e16bcfa6b60.exe

Files

NEAS.aa749c6dca9f74dbabf59e16bcfa6b60.exe
.exe windows:4 windows x86

42964d35fbb952aa0e06fc5abd0a53df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapUnlock
ClearCommError
GetNumberOfConsoleInputEvents
GetTempPathA
GetNumaNodeNumberFromHandle
GetLogicalProcessorInformation
GetSystemPowerStatus
WaitForThreadpoolTimerCallbacks
CreateFileTransactedA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE