NEAS[.]54944273036d68035c36c4ec6bf6d950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.54944273036d68035c36c4ec6bf6d950.exe
Size

5KB
MD5

54944273036d68035c36c4ec6bf6d950
SHA1

5baedd7b179e967b915196add530ab21473e6da3
SHA256

4e310704c187b2d01b3f1bd91f78e1bcb9dfec9e0f69799f9305f58dbde2106b
SHA512

db4a3e236c976ad57ed4d8219769a6536929ade709422d0e2b3f2bed4b4c6bcc089877eae5e56f5212ee534370a29c2fccbf635e255c3e00156957f0e9f2ad0b
SSDEEP

96:nEY2RrF1eqwi4ho8o68cJue4hbI4FE2q7+a4F1I:EHRh1epp9+C4NI4FE2qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.54944273036d68035c36c4ec6bf6d950.exe

Files

NEAS.54944273036d68035c36c4ec6bf6d950.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ