NEAS[.]c6ab65c97649c4c45a357370cb00b830[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6ab65c97649c4c45a357370cb00b830.exe
Size

5KB
MD5

c6ab65c97649c4c45a357370cb00b830
SHA1

1f0fe04e5f8879c31327a1f244924c6313130cee
SHA256

9ed11740e6e91662a10bd20b9ce25cf1c94a5c5e6586f2d20f625eb6202cacd3
SHA512

32d6fb000de1f1e72d63ba4f0899f1f05399ebc858ba3ba2a80255849d56a7b50089c5167f72eb54ec579900c8df031259829d752c81c01e749e9e021504b10e
SSDEEP

96:nEY2RrF1eqwi4saSqtXqWcazo4tvIf1ieJj1o:EHRh1eppsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6ab65c97649c4c45a357370cb00b830.exe

Files

NEAS.c6ab65c97649c4c45a357370cb00b830.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ