NEAS[.]deba7275190ae674dcdd02bf651ff460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.deba7275190ae674dcdd02bf651ff460.exe
Size

5KB
MD5

deba7275190ae674dcdd02bf651ff460
SHA1

6bd2117109a6eab95c4ee5602c816f6352f78bfa
SHA256

705250ce68ec509012dfcb0b8e6c58fba79159647814d4e41d8120697b92d02b
SHA512

e9e2f35e78f1e0feb07076a5d600bd9b4fbaa37e4951755a388fed0417b504d29e203ba0eab52365e0d74ffaf40018031037d1a31ea14ae304b9533df1f011cc
SSDEEP

96:hy859x0P8MaC9B0wIio0U8EhuHQWsS69:F5oLN9B0OUWQhp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.deba7275190ae674dcdd02bf651ff460.exe

Files

NEAS.deba7275190ae674dcdd02bf651ff460.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ