NEAS[.]c99ed6b7727d426eec8bf5c9f7f27900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c99ed6b7727d426eec8bf5c9f7f27900.exe
Size

3KB
MD5

c99ed6b7727d426eec8bf5c9f7f27900
SHA1

e16b2e2c0233967a4593148828ff7b928ae5eaf4
SHA256

64d1aca5b5309d18bf60fa5edfffaa695473bf08c03fbb07f5ab8bfdde3d80b6
SHA512

66e74ac678e38cb7a238a6bb8b6a4b7a0f77f104d14f4ad2f86c88ecab1c064b97ee8b535de160604497b870c6d6c1281fbfdcbc5672a0c0b5cbc2e1e234a16c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c99ed6b7727d426eec8bf5c9f7f27900.exe

Files

NEAS.c99ed6b7727d426eec8bf5c9f7f27900.exe
.dll windows:5 windows x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ