NEAS[.]97c127a9da16df3d1ac2936645232c40[.]exe | Triage

Sharing

General

Target

NEAS.97c127a9da16df3d1ac2936645232c40.exe
Size

67KB
MD5

97c127a9da16df3d1ac2936645232c40
SHA1

6165a51959693291672c6f0fcb02fd37a103d936
SHA256

21a00f7726a032a887842d650fb1ce689a1d60b8a71ef0078b788cb063dac1ca
SHA512

34877a85e226d07a68c45ddc760fc3474e4c277ef7f1d4e2b34f87980234613c9e89fb78653dbd728dcc06274735bbd63276ba54e04050101f7286daa56c5def
SSDEEP

1536:xvTe+W6ilightyTi6pb39VENbPwFdBKDwpxtrsdHEd:xbhRwHtEiShqbPSJpxtN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.97c127a9da16df3d1ac2936645232c40.exe

Files

NEAS.97c127a9da16df3d1ac2936645232c40.exe
.dll regsvr32 windows:4 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 58KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE