NEAS[.]5249d1890c5b345ca55d3692128a4070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5249d1890c5b345ca55d3692128a4070.exe
Size

5KB
MD5

5249d1890c5b345ca55d3692128a4070
SHA1

476a26ddfa8f27cce0eefa181b938e5e2df6c44b
SHA256

d1458939a61cfb65cdc95eeecd1be97843402c99ed21e81effecbe63caa41df5
SHA512

d7f68c2e0aeac4571a6fbe89aaf9ddc5f90bee94b5bb67a34e9f901318614668314353a9fca3ab10d2e2b446ce613eca7643f3d7629d2f49956e89bd31688f23
SSDEEP

96:hy859x0P8MaYSKLOc9xfAzjwqBttiPUoLiBQ57A:F5oLpCc9xYzjwqBtticOiBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5249d1890c5b345ca55d3692128a4070.exe

Files

NEAS.5249d1890c5b345ca55d3692128a4070.exe
.dll windows:5 windows x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ