68d001e232ca299435a5e4f14179c190_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68d001e232ca299435a5e4f14179c190_NEAS
Size

200KB
MD5

68d001e232ca299435a5e4f14179c190
SHA1

6c76915ac14ccd4b583dfae787cc939a2b648dd4
SHA256

553d0033eae537662c7a26c5fa42236cd563f84cf4a6f2ac8f9e9a13ffbc08f7
SHA512

b29be932ae27613186af8e65043c3f4d61316e94799c028091102c0295b384e8b844f21fc498f4a94a4fcda4a03b5570f2bcb91e2f5ca230743c86a756c5583c
SSDEEP

3072:R4CF0AnyFfdpg5qv+P4N3+cO1VjX6jD3U6nL0Q8cwFuWFaicLqdgACdTkbj+AH1r:YfdiU3w1Zq3EML1FodkBqSACaiAVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d001e232ca299435a5e4f14179c190_NEAS

Files

68d001e232ca299435a5e4f14179c190_NEAS
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NPGetCaps
NPLogoff
NPLogon

Sections

CODE
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ