NEAS[.]95670679eafd2fca7c07a09add8ac410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.95670679eafd2fca7c07a09add8ac410.exe
Size

6KB
MD5

95670679eafd2fca7c07a09add8ac410
SHA1

8ea6fe962e8196fca34b14b2319895475fee7c5e
SHA256

206673c4eb368af0935c9ca5698a69801a70bdef7411f96330d53d98251654b2
SHA512

cbac7e603987111b8eee66b4d76da6929759a29847708c0281ea723ae91c0b8f79c97bf8d8633bc8c55c7b404405d2437c949daf1dcd9d7479c53d82e0247779
SSDEEP

192:unSR6bgY/5BuTjDz8Co375fybPGk6kEWFjNTTL:uZ/52Xw3ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.95670679eafd2fca7c07a09add8ac410.exe

Files

NEAS.95670679eafd2fca7c07a09add8ac410.exe
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ