608396305edca3dfc8694404d0f95f20_NEAS | Triage

Sharing

General

Target

608396305edca3dfc8694404d0f95f20_NEAS
Size

89KB
MD5

608396305edca3dfc8694404d0f95f20
SHA1

fe6158ada538049017af7cc4a1cf0b5b7fcf4747
SHA256

4bc10b220bb5dccfd5e58296476b7542e0b7273bf0261e751bef6a96dff4a84c
SHA512

0e66abf65fd99d378ea23679fde91295e5daec9b432f519f6e0da90e1bbd257739e96b6ea297fda00b621deb77671e76b938a6ad0d6b87a9694a188a3c44a094
SSDEEP

1536:fwrYhJLMXz1otVBqbajtcfzGNrZ7Sos/3WShQ/Yi7waBC2Eg9:IY3gXz1otV3jifzGZZ7SosPWEQQKwa8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608396305edca3dfc8694404d0f95f20_NEAS

Files

608396305edca3dfc8694404d0f95f20_NEAS
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

fuGetBer
fuGetC0er
fuGetDllArt
fuGetInfo
fuGetPer
fuGetRiemenart
fuHandlers

Sections

CODE
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ