NEAS[.]c1d07ea7446e9ad6127118241a206360[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c1d07ea7446e9ad6127118241a206360.exe
Size

6KB
MD5

c1d07ea7446e9ad6127118241a206360
SHA1

ee956f85cf31fe394697365c9f5bd0b7fa5cc909
SHA256

d3db2758c22fe82ae70a02e9facd0327177dad064538b64bfedcfa1e526aa5e9
SHA512

3ef05c78535313a4700c9a56c25b741418160e36f46769a8b0b90445307ac1c89e95d7209f2aac4447aef2d06e8a5c29652a6c47c50136e9e01c6850bd746e25
SSDEEP

96:hy859x0P8MaWY4H6CRYfQsYMClKPrwbs5JnO0l74pBuPymD:F5oLA4H6COfQjMCEzwbsbO0aTuPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c1d07ea7446e9ad6127118241a206360.exe

Files

NEAS.c1d07ea7446e9ad6127118241a206360.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ