10e704c1d257fea0c865a15a22dfdb10_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10e704c1d257fea0c865a15a22dfdb10_NEAS
Size

6KB
MD5

10e704c1d257fea0c865a15a22dfdb10
SHA1

191c3473c3d86ae68b33e2eeefeaba76d142fe88
SHA256

dc95add0d3b1ff540d9186c00409a9f5e1df1234acc1a30e7bb866f55dadc23f
SHA512

015b413e5b54f25cbe7486acd25866a900f1267b3df1466ea5e759256c89978cba4f1519c3955432a62614774e668ea27865c139ea4361e085c104f4cc76d3c6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIVOY6XHqF3ZiWdO:unSR6bgYE53ZiW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10e704c1d257fea0c865a15a22dfdb10_NEAS

Files

10e704c1d257fea0c865a15a22dfdb10_NEAS
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ