3b2f98a1f4c5eab1a9adc8c954187e80_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b2f98a1f4c5eab1a9adc8c954187e80_NEAS
Size

7KB
MD5

3b2f98a1f4c5eab1a9adc8c954187e80
SHA1

e928f2ed132cd7339b3121d7bbe53c18caa73932
SHA256

f553680fe3c759f855a53d280f30f28390dd816216182bb5a0fb86eba47663fc
SHA512

5e4a002715350c90dfeeaf7f4e8746548bdb69bf7a3eda87ee9858145b3a7730d41aad475d47292564b2c4774ca56c70ae8b862d80db7b4283dd4f0c8f2fb115
SSDEEP

96:FkBAx2WmE36e07v03GJsBo+cw5Wp2Xse1YctPDxwe91D:FkBC+E3S4CaHPlDxweb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b2f98a1f4c5eab1a9adc8c954187e80_NEAS

Files

3b2f98a1f4c5eab1a9adc8c954187e80_NEAS
.dll windows:5 windows x86 arch:x86

a330ab4571994ddebf91be7a95f5c0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
GetTickCount
Sleep
CloseHandle
CreateThread
lstrlenA
DisableThreadLibraryCalls
GetModuleHandleA
CompareStringA
InterlockedExchange
RaiseException
FreeLibrary
LoadLibraryA
GetLastError
LocalAlloc
GetProcAddress

user32

wsprintfA
wsprintfW
MessageBoxIndirectW
SendMessageA

msvcr90

memset

Exports

Exports

winampGetInModule2

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ