4b0b7cc35dc977dc76fdc72a43b9f670_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b0b7cc35dc977dc76fdc72a43b9f670_NEAS
Size

42KB
MD5

4b0b7cc35dc977dc76fdc72a43b9f670
SHA1

58b854c786127cdeb9b1e7c70170c38035e48038
SHA256

c26a9776a7766c8beb5608d04f6953ce92e4288f163e0f54233487b38a094b2a
SHA512

90be194c9659a66a1d278a562652110f2a3f976dc116eb5a3b4334b89d221acbfe8b82665361c7d95194752c078dcfe1c739e999db7257b6b6e4776378acb5c8
SSDEEP

768:l1Jsyt64pvVCa0UXv1IidlsBw3tr7Z1slIZnvJGGYkSIgEZXjjWOI:PJVlvka0KNIiSAr7JSKH7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0b7cc35dc977dc76fdc72a43b9f670_NEAS

Files

4b0b7cc35dc977dc76fdc72a43b9f670_NEAS
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\TeamCity\buildAgent\work\ad1fb2583d3124a9\LP.UpdateService\obj\Release\Croc.LP.UpdateService.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ