NEAS[.]4ac30e258f4dfd27ad08ed2394981c60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4ac30e258f4dfd27ad08ed2394981c60.exe
Size

6KB
MD5

4ac30e258f4dfd27ad08ed2394981c60
SHA1

ed4500e24a13c34cc1fcd59ec451b466c7907c28
SHA256

6ac442a8f4a309f1590032f6d3ad6923f58bec069ea0a9bc680b0e9d361f83bd
SHA512

5bf032c4f72da8cd7dc81f5c3ab5d3f10b1a4a9e886aff03d7884303bd1eb79b5e14abadcad86d279f02a73e0322a8b077dba43969885ee6e369fcf3f9bb5e72
SSDEEP

96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniROAxEiZi7B4LOMGRjcR2ciHf:YXNxEiZiV4K/SR2xf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4ac30e258f4dfd27ad08ed2394981c60.exe

Files

NEAS.4ac30e258f4dfd27ad08ed2394981c60.exe
.dll windows:5 windows x86

9afefbdd5421ff1ca011cede13cefa28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetProcAddress
LoadLibraryW

user32

SendMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 455B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ