NEAS[.]9e02244c2ef89af031df4b1fd733a7f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9e02244c2ef89af031df4b1fd733a7f0.exe
Size

4KB
MD5

9e02244c2ef89af031df4b1fd733a7f0
SHA1

0221d9526c66cfea352db672e1f14f2917896823
SHA256

4303fbad70bd7fae86e5ecf13a93f429cf46f097218266d97ad39dbfc1abcaf9
SHA512

9e78d96bb8485265a50ba2c7b0083022177c6be6b34bd18e7e25eeedcf82130944d76ba6108c1231b81c7c271a196b45b3a145c930fec66128ac3d9a7176e663

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9e02244c2ef89af031df4b1fd733a7f0.exe

Files

NEAS.9e02244c2ef89af031df4b1fd733a7f0.exe
.exe windows:1 windows x86

4e0b996c9a9a9c2d3fc9db12039f8220

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA

kernel32

GetCommandLineA
GetDriveTypeA
GetModuleHandleA
RtlUnwind
Sleep

crtdll

__GetMainArgs
atoi
exit
memset
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 156B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE