NEAS[.]e14d552ab59f93621349271d065039b0[.]exe | Triage

Sharing

General

Target

NEAS.e14d552ab59f93621349271d065039b0.exe
Size

6KB
MD5

e14d552ab59f93621349271d065039b0
SHA1

9002530a5e69fb874a8dfb08dbe2f1ed0fa5263e
SHA256

d7008fb500e0a3e95a53b6f0cc19f3e92bb7f72f8d3b5b7e15b0e14749eff1a5
SHA512

cea5d46241487ec511f5059dac2f44f327bc82ea85f761be657c517678ee8289240f85be2b532780a816d0b155a8bcdca27578f1516f4e9ddce2910b54966506
SSDEEP

96:nEY2RrF1eqwi4swcRk2HTjeaSLBT5VBlcFsBzOB8us0Vy:EHRh1epp9xaSlT5flckc1s0Vy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e14d552ab59f93621349271d065039b0.exe

Files

NEAS.e14d552ab59f93621349271d065039b0.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ