NEAS[.]20ba203d517eea7585135b3aaa6ce060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.20ba203d517eea7585135b3aaa6ce060.exe
Size

20KB
MD5

20ba203d517eea7585135b3aaa6ce060
SHA1

5da1a1468981164dcc36e54c5de881244b237a5a
SHA256

2611b2469ad314f96becc1e95697e18d35505ccd9327c1bd4f41f85a4dfc3038
SHA512

9027abb2a0747a653baab054f00cae5ce241d30e38b29b185841c6ae87092965aaf6cd0195f88c18febc8b22542249fd1db6c193644ae90120ff7138c376b993
SSDEEP

384:TIW2hISfXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:TIvThQGPL4vzZq2o9W7GsxBbPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.20ba203d517eea7585135b3aaa6ce060.exe

Files

NEAS.20ba203d517eea7585135b3aaa6ce060.exe
.exe windows:4 windows x86

efb2c106be6c2bc8cffe4984e09370b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FillConsoleOutputAttribute
GetConsoleMode
GetStdHandle
ReadConsoleInputA
ReadConsoleOutputAttribute
SetConsoleMode
WaitForSingleObject
GetCommandLineA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZH��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE