NEAS[.]c4dbafc3aede45627c5a196a140eb3d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4dbafc3aede45627c5a196a140eb3d0.exe
Size

3KB
MD5

c4dbafc3aede45627c5a196a140eb3d0
SHA1

03695f191d2cf6882db20c8024930cd8956474cf
SHA256

bfdfb148746d82456f7177cb0a22a35dc6677c6c75c33908d074c1cccb597d79
SHA512

89cf2f5f7e04f7c15b3c8231159d93894db3ff0bc845c6ee5ff673842d41777e3dcae4351e3a4e286c1da8f62e3eda1708d3b4943c0534be33333fb2e7439069

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4dbafc3aede45627c5a196a140eb3d0.exe

Files

NEAS.c4dbafc3aede45627c5a196a140eb3d0.exe
.dll windows:5 windows x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress

Exports

Exports

?rundll@@YGXPAUHWND__@@PAUHINSTANCE__@@PBDH@Z
rundll32

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ