0d9826fe1a999ae8ad51ed1c23832a10_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d9826fe1a999ae8ad51ed1c23832a10_NEAS
Size

120KB
MD5

0d9826fe1a999ae8ad51ed1c23832a10
SHA1

50185317e49bfe8dd904a9a3aab4b73e887a05bd
SHA256

2e63aa8e2e65da810ceb41c88c7f2e3b68b1e3aeb847e5886e88d425d02eed2c
SHA512

b8239edb15743544e6ef84241790533bb0c274ba1ea216272fd8997907e3592e4a02238d5320ca1a797e7dd28d856b5d4ed0de02a6cfbe1e023c1d451a7b10d3
SSDEEP

3072:C1Fb7R/AgLpPrgcJbVM3SrKLaVTC6qvG6:Sb7NBPPJy3hapCVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9826fe1a999ae8ad51ed1c23832a10_NEAS

Files

0d9826fe1a999ae8ad51ed1c23832a10_NEAS
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ