4d94383f0c364db33ee2cee144523c60_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d94383f0c364db33ee2cee144523c60_NEAS
Size

582KB
MD5

4d94383f0c364db33ee2cee144523c60
SHA1

800c589b20ac3293fd5d025a73147370a4b805a9
SHA256

7652db2a66273070da47bd7e3b83b7717dc690b2074056df40780b18c777e1c2
SHA512

0f583ffc809b915904c01e4432b760cc3d0b5802c983fb992dd68fa8c247497cc3d2757bd4f463052e663128999924414e3ea2332095c8fea83b9f54af4a7f6f
SSDEEP

12288:00qyYHVFdVUaiJiqbkqlDDuOzWbCTBOHgySkb:9siJiCzWZpSk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d94383f0c364db33ee2cee144523c60_NEAS

Files

4d94383f0c364db33ee2cee144523c60_NEAS
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\TeamCity\buildAgent\work\ad1fb2583d3124a9\LP.Integration.Commands\obj\Release\Croc.LP.Integration.Commands.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ