48583965f3b18f6a664b6ab696796420_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48583965f3b18f6a664b6ab696796420_NEAS
Size

9KB
MD5

48583965f3b18f6a664b6ab696796420
SHA1

9f604bc1a147623d1d43c2f30453d1f4b689a80c
SHA256

11bfac7c92c07a3e53e6f1a09376436f8281ec32cb0d427c6fb4cced66e5d7e2
SHA512

8c9b6b39812083f9df14b14f01c923de3d36cb56e79976760c968bb76e0c772f536f1b0c307237cbba8e9e8024e2a44b2c51d115d222ffadf78a9ceffee17428
SSDEEP

192:dEQ4G7Ci+qyyksJk1AlUKAmFH2wzJUGH0:dE5G7nfyy7kWTVSo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48583965f3b18f6a664b6ab696796420_NEAS

Files

48583965f3b18f6a664b6ab696796420_NEAS
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ