NEAS[.]40621ca42c0b6a7778fdfdb558f1ad90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.40621ca42c0b6a7778fdfdb558f1ad90.exe
Size

6KB
MD5

40621ca42c0b6a7778fdfdb558f1ad90
SHA1

32c8e927855024f6dcf1250c5d12d0eb2ba21282
SHA256

cb8d66b81a8f9d84d2b99068ffdbc066276c0ecd7d47dd8aabafe5be23babfe0
SHA512

6bd1e27445377319464fd1f90f94243d06e7decbe3e62d347e9544197b74fbe57cbac48b80aed5a953e426f3ffa8d5ca7847320a69a930732c054979c5aa35c8
SSDEEP

96:hy859x0P8MamPSrQFD6+r6KJK13u+9myt3CtPncIdGuZYAXQ3omn:F5oLr4cauzAyPdy3n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40621ca42c0b6a7778fdfdb558f1ad90.exe

Files

NEAS.40621ca42c0b6a7778fdfdb558f1ad90.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ