NEAS[.]a0a36658b112f538ec93426dcf74ab20[.]exe | Triage

Sharing

General

Target

NEAS.a0a36658b112f538ec93426dcf74ab20.exe
Size

3KB
MD5

a0a36658b112f538ec93426dcf74ab20
SHA1

27b9ef1bb6a16a6c30e2a3b4ed105d795a6d367c
SHA256

f2b88ad8cec24af641376d40813bbf96ff474ff75ced5c009177c0ff9183bae8
SHA512

dbc2d7ff03de570b0663995e7756866c6c50d4e5f3c500fe97c57008fa258312feff78abcaf1d7a4cbd006f50fc4c61c22592fd2183f23bc3b0795160a6f4828

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a0a36658b112f538ec93426dcf74ab20.exe

Files

NEAS.a0a36658b112f538ec93426dcf74ab20.exe
.dll windows:5 windows x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ