NEAS[.]2626f11d2509d11aad2c00c46eef9290[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2626f11d2509d11aad2c00c46eef9290.exe
Size

119KB
MD5

2626f11d2509d11aad2c00c46eef9290
SHA1

0873140899f7cdffae9639cfe4547e2ac94cc10e
SHA256

0410b8656736369e6447bc147441f96c7c16ed02b1f06ab8f91ce41716e1c5f6
SHA512

222d9ff4d14c50165fc933a1d313df68b0326e13560ac9a2d551e9b9b9c697f2c089635f065c52614c2c62896bff203284d5d76e33806341480133baed5f2f38
SSDEEP

3072:PtpfyYUH8gZJJcHIz6CRJwiUqv2vpxlcy7n353TGgbkgfHiexB0R0rb:Mz92eMxlZ7np3igdfCMSR0rb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2626f11d2509d11aad2c00c46eef9290.exe

Files

NEAS.2626f11d2509d11aad2c00c46eef9290.exe
.exe windows:4 windows x86

113c0732a7b6a041390f52a3ae861556

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetSystemPowerState
RegisterWowExec
GetFileAttributesExW
SetLocalPrimaryComputerNameW
FindFirstVolumeW
EnumSystemGeoID
GetVolumePathNameA
GetSystemPreferredUILanguages
WerGetFlags
RegQueryInfoKeyA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE