NEAS[.]a61e9271f5e60a574a4fabd05e0f6df0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a61e9271f5e60a574a4fabd05e0f6df0.exe
Size

18KB
MD5

a61e9271f5e60a574a4fabd05e0f6df0
SHA1

e39b20790912aa7864757830338047ff5c0a364b
SHA256

be4246aab62f0736b0c63ad667186bf759f130a0082906879d38354585f53e3a
SHA512

fc083d40fcb05256f2b1f3ebcc37ca7f7fdc61668a6ff5464c0c9bd259ff54c5372858aab4468e221d57cade5cd5bb50b1892f0eb8d4fbfa2fa0b94eee7c878e
SSDEEP

384:uDLGzORm64WnE4CLi3TAVjiQJ6i1KsU/TIXmKIx:uDOmELL/vJ6e+U6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a61e9271f5e60a574a4fabd05e0f6df0.exe

Files

NEAS.a61e9271f5e60a574a4fabd05e0f6df0.exe
.exe windows:5 windows x86

df31de49f0d6f3fff99a4cd1547d55a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetModuleHandleW
GetSystemPowerStatus
LoadLibraryW

user32

GetSystemMetrics
CharLowerW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ