NEAS[.]48eae077f7314949682a5ade6dc6ce70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48eae077f7314949682a5ade6dc6ce70.exe
Size

5KB
MD5

48eae077f7314949682a5ade6dc6ce70
SHA1

aa58e2cbe620eb71e8a5598b9e8606fdae0e49b7
SHA256

2e2520ee091fcaf295d1535d9894db2f4ef1ef833dd5dd02e787ac5a799b60e4
SHA512

0db54fdc997e711f20db4fcec082ce477ed2db3d37c3aa5de67375f4434072755cebb123d4234c346ad8ab95a6d96baf7db82bdbd2439aed60f5126761a27b48
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhoOoNd75mcOivpj12qp:nEY2RrF1eqwi4mkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48eae077f7314949682a5ade6dc6ce70.exe

Files

NEAS.48eae077f7314949682a5ade6dc6ce70.exe
.dll windows:5 windows x86 arch:x86

76812f441b0ed9d3cc0748af25d689a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
VirtualAlloc
LoadLibraryW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 423B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ