3a6c7bf59245790c2080cecdef8d1000_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a6c7bf59245790c2080cecdef8d1000_NEAS
Size

5KB
MD5

3a6c7bf59245790c2080cecdef8d1000
SHA1

3b0e0f8eea6d24fd1795419bc37cdb5b4876155c
SHA256

71062355321eff18fbf26fc4c674dbc1f6faa79bf376441ee932c46b45dfecda
SHA512

44176cfa6932da9bc9a1df6a03dcafd7a5f71116b6723bc54abfccffbdc644c137886595ccc774ef3e2d96cd4c74cbfe1ee3e3829797c588e0c386eb79fa4486
SSDEEP

96:ZJTnXzvokkj+Tv0T6HytYKKMJ6qw8r310V4:ZJrXzwktcT6nKKMsq/r3SV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6c7bf59245790c2080cecdef8d1000_NEAS

Files

3a6c7bf59245790c2080cecdef8d1000_NEAS
.dll windows:5 windows x86 arch:x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ