NEAS[.]0f65178d77705c2344e329315a3426b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0f65178d77705c2344e329315a3426b0.exe
Size

7KB
MD5

0f65178d77705c2344e329315a3426b0
SHA1

84173532a24bb64238bdab50b67176b387deced7
SHA256

f617e328d0dceee8fb5b3964052b73734f8b8d2c7b35ee92e310d0adf9a61930
SHA512

bcaec52a39af5bf4cc2ba6fa0d804ea2296df5b877bdb3fd8e49769cc17165392543f9750ffe8f23114c1c59beec78de659b6e159b56386f10b63d8b01a8d758
SSDEEP

192:unSR6bgYrCyCwSO5ZoOxWP0IrbalO3j4A:uZOyCwSO5ZoOxWP0IrbalO3jn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0f65178d77705c2344e329315a3426b0.exe

Files

NEAS.0f65178d77705c2344e329315a3426b0.exe
.dll windows:5 windows x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ