NEAS[.]ac80f04196a083d80c839da43f38de70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac80f04196a083d80c839da43f38de70.exe
Size

6KB
MD5

ac80f04196a083d80c839da43f38de70
SHA1

316e2d5520dc83d881ea6af19b886084d05be8fa
SHA256

cc0f8b37288bf7eb0e47bac8d3a370c7934b05b4f7a4e1de7097f13773fd3e1e
SHA512

8efe9c5bac1904b18946043d28a2b867c56f5a34c93d43b75c00ffb5087d5b653be9d6fcb1becf22f1f397b51c83318af20c1129d51f9b2cacefebd463f63fee
SSDEEP

96:hy859x0P8MaCTn3hAqQ3IVxs0pKXjx6nt2c7a81FefR0GxHJF5:F5oLv32rgejMt22ULxHX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac80f04196a083d80c839da43f38de70.exe

Files

NEAS.ac80f04196a083d80c839da43f38de70.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ