NEAS[.]d0733fffbef4c2878c71b825d9cccbe0[.]exe | Triage

Sharing

General

Target

NEAS.d0733fffbef4c2878c71b825d9cccbe0.exe
Size

264KB
MD5

d0733fffbef4c2878c71b825d9cccbe0
SHA1

eb81e6c54578a94f3de041c5fbab965ac18dbccc
SHA256

f51b366c9d2584bf5f4870a2a4921ddaa5f8558f5f1abf84776c7c4170e39dc8
SHA512

e61e84219dd828c1c1e4cebfa3d99efc0fc0eebb002c5ca5488a6db3de1f78ca3211f77b7acd99982b9a50f2aad60badf459ac1d3bbcdfb0905c0045380d7248
SSDEEP

6144:QMOhmHTDmxF/j6jqihnoy4miw5fXLZYQfc:yheDmxIuihnoyX/LZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d0733fffbef4c2878c71b825d9cccbe0.exe

Files

NEAS.d0733fffbef4c2878c71b825d9cccbe0.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DirectPlayCreate
DirectPlayEnumerate
DirectPlayEnumerateA
DirectPlayEnumerateW
DirectPlayLobbyCreateA
DirectPlayLobbyCreateW
DllCanUnloadNow
DllGetClassObject
gdwDPlaySPRefCount

Sections

CODE
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 327B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ