NEAS[.]1c0c56ccad7f3172575f3fdc7962cdc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c0c56ccad7f3172575f3fdc7962cdc0.exe
Size

6KB
MD5

1c0c56ccad7f3172575f3fdc7962cdc0
SHA1

8cf13bf744855739d3db668b21da9da3d723f8aa
SHA256

6a51cfdc91cbe7231cc71b4bfe47184e1e8e993ce7845f285db4a8ed1a9ccabb
SHA512

427ece0ecf07d3e37c027d27f9f6d91405951b82ef8332da4299936898ef7d8d9ef97c4463f3fe9176065b13726e44d01bf2ef8d5cd310f2a193c21e7efd65a4
SSDEEP

96:hy859x0P8Mab5o3Yzf0oPBwL4Z+ZIfN/DZ42RpV8NRjqBu62yYH:F5oLy5O4f0ywO++Rz86U62V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c0c56ccad7f3172575f3fdc7962cdc0.exe

Files

NEAS.1c0c56ccad7f3172575f3fdc7962cdc0.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ