NEAS[.]2aabba6611597c01ce97b9a46344e920[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2aabba6611597c01ce97b9a46344e920.exe
Size

119KB
MD5

2aabba6611597c01ce97b9a46344e920
SHA1

73bc33e570bd0eca6ca5481d84374291f491a1d3
SHA256

7eb233bf90fb13990f977e65a3916ca86f67f16c9f34e4e4fce817ae3612b538
SHA512

a0b3e470f4ae61aa07c1ddef3cd7193b70307bd109d2697ff631c9396f2215fb136d8da47c453d85e9e90dfbdbcecfc5b36aea0730864e1b6e1c7222d6f6cbb3
SSDEEP

3072:ATxhwH2uMSC3g48jmcIdgeyYXDqLhxuoeoCUp+Z/4R:yhwHhMSCUhvlYXDqLh0oe1Up+mR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2aabba6611597c01ce97b9a46344e920.exe

Files

NEAS.2aabba6611597c01ce97b9a46344e920.exe
.exe windows:4 windows x86

0420dc283536179fecb2cb478fe826eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFirmwareType
ActivateActCtxWorker
K32EnumDeviceDrivers
EnumResourceTypesExA
VirtualFreeEx
SizeofResource
SuspendThread
GetProcessAffinityMask
WaitForThreadpoolTimerCallbacks
GetProductInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE