NEAS[.]ba71bfc9ebaa632df2bf9c2027be9e70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ba71bfc9ebaa632df2bf9c2027be9e70.exe
Size

119KB
MD5

ba71bfc9ebaa632df2bf9c2027be9e70
SHA1

402faaaad0cc3d1bede4a45ad1eecfe57aca3a14
SHA256

9614aeaf00f3aef15d6de2deeac751472e79096139930d758de1f289bc258d89
SHA512

13085e57ba6a9e145ba5afd7f9a3189607e289e1d556c080d16acf67c2b0693994d02cd4f0cd9bd2cf924fa8cfb4dca08f387a794626203ea173329ffafad4af
SSDEEP

3072:HTvp5aPAdNvwW5iBDKvKJSJ389BaChBsfpK:Hj7aIXvwUSSKI+BPb2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba71bfc9ebaa632df2bf9c2027be9e70.exe

Files

NEAS.ba71bfc9ebaa632df2bf9c2027be9e70.exe
.exe windows:4 windows x86

165265c4523d921b51b4f9da79c22e22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDevicePowerState
ReplacePartitionUnit
GetConsoleInputWaitHandle
UnregisterWait
SetEvent
BaseVerifyUnicodeString
SetDefaultCommConfigA
UTRegister
CancelDeviceWakeupRequest
RemoveDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE