NEAS[.]ac247941f077b30a691e67d82f2c1090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac247941f077b30a691e67d82f2c1090.exe
Size

6KB
MD5

ac247941f077b30a691e67d82f2c1090
SHA1

7fd315d93d185c6926501aaf81bab333d00b7b4f
SHA256

1e14d2dda4785983cb6e6c216338520c4d60abcb08f522d33f0521d8cea2f472
SHA512

d0f1cb9d29f1dd29d530e252b654eb2a82572988f3c7cdf2923129522f5df4311386eb0a90eca20277a08a7e21fb089ad69ad09693164c2c8ecb5e458fbecbc9
SSDEEP

192:Ft11+PGkumNd56lRJahdvdkdJDEIuGC15I:Fb0et0bYR8hdvGvDEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac247941f077b30a691e67d82f2c1090.exe

Files

NEAS.ac247941f077b30a691e67d82f2c1090.exe
.dll windows:5 windows x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ