NEAS[.]5af322e9b7b07d88665210ed8788f880[.]exe | Triage

Sharing

General

Target

NEAS.5af322e9b7b07d88665210ed8788f880.exe
Size

6KB
MD5

5af322e9b7b07d88665210ed8788f880
SHA1

10ccdc4747bfc37d2fb355bbf0c4d3cf3c98f41e
SHA256

199cbfa271b764b07b5503bb75ebee3517dfe90d777a27bfe3c55bde26d6a3dc
SHA512

d1bb56e8ab61d536ec6bc44384e197511eb9d771c49f24c6ea2058eda069582c6018f61d191a4f3a068b3725c275d140cf79763772f4f14dd6b50adc2b6a658d
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHh1bSsQmH5GbnBZJ7YXpARK5jb4N7:nEY2RrF1eqwi4H+sObnh7kpmK+N7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5af322e9b7b07d88665210ed8788f880.exe

Files

NEAS.5af322e9b7b07d88665210ed8788f880.exe
.dll windows:5 windows x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ