NEAS[.]7948f483c34d7e9c51b4a6a68fa731f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7948f483c34d7e9c51b4a6a68fa731f0.exe
Size

3KB
MD5

7948f483c34d7e9c51b4a6a68fa731f0
SHA1

938e542333fac28fbd10e86fae1c00b3d7fdc099
SHA256

dfe74b205fe7ce4fb62ed092a0a00f44984e0e74cab3b6cd556634bcfb036c7c
SHA512

8596f6fdb2d7439823c087c36e9c9be680b1fdf4f07ba1734014597aab8a60ffcf5b3d84bd541d1ae7f61be3d0ae107e3e814c26fb6379da3aa2fee53f11c798

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7948f483c34d7e9c51b4a6a68fa731f0.exe

Files

NEAS.7948f483c34d7e9c51b4a6a68fa731f0.exe
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

CloseHandle
DuplicateHandle
GetHandleInformation
SetHandleInformation

Sections

.text
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ