395a6e81f269c1bebb6ed0b8731f9a40_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

395a6e81f269c1bebb6ed0b8731f9a40_NEAS
Size

9KB
MD5

395a6e81f269c1bebb6ed0b8731f9a40
SHA1

59b3b9fee865c0b6fcf405837c0ef09795053d8e
SHA256

ab109e67e913e9bffb14a3c1a2792e5d192e1ba8a333bdbfa3b0e0bfd2ae48d9
SHA512

0b2a6a0c38ad16673af1a8bf7480fd3c1e5f8ac9903e7202f2ac70a4a56b485370c6c17b56e1000cfcbc53937ec10867739371bdfeeb3985a9f5352dc831c2f7
SSDEEP

192:FKwkVwGwsBvG1CHn2IGOJSuQbLhIW1PnazEuqpNpne:YFVwG52ZhbLrnazZMY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
395a6e81f269c1bebb6ed0b8731f9a40_NEAS

Files

395a6e81f269c1bebb6ed0b8731f9a40_NEAS
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Projects\ERW\ERW\Interpolate\obj\Release\Interpolate.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ