06a60bfa6dd0e3b88ad881b0c20b6580_NEAS | Triage

Sharing

General

Target

06a60bfa6dd0e3b88ad881b0c20b6580_NEAS
Size

7KB
MD5

06a60bfa6dd0e3b88ad881b0c20b6580
SHA1

05c64aacd990d88e3dcb610ce51827c3391c1b76
SHA256

169365cf31e182cc6f179b3e3dcb27c343259bab639efcb7302cde00d4b03fd2
SHA512

103b9e83bbc93fe7b12675a700eb5693187dd496bb0910b139108925a38b3ae0319f4bffc9552aebcb8830775639d6085a47100f441bdff25dc926f168e5ea6f
SSDEEP

96:fPVhuLOPSogbF2KQ72cmnmVZnI/i783b0x1:37gOPWbFJdmVxIn381

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a60bfa6dd0e3b88ad881b0c20b6580_NEAS

Files

06a60bfa6dd0e3b88ad881b0c20b6580_NEAS
.dll windows:4 windows x86 arch:x86

4b0e3e04b5547e0a3f0f468739bf7833

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crtdll

__GetMainArgs
memcpy
memset
strcmp
strncpy

kernel32

CloseHandle
GetLastError
LocalAlloc
LocalFree
LocalLock
LocalUnlock
CreateFileA
ReadFile
SetFilePointer

Exports

Exports

GetPicture
GetPictureInfo
GetPluginInfo
GetPreview
IsSupported

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ