745818879f91dfafce5bcc163f410230_NEAS | Triage

Sharing

General

Target

745818879f91dfafce5bcc163f410230_NEAS
Size

7KB
MD5

745818879f91dfafce5bcc163f410230
SHA1

48044348ecf3837d380a7d3b8c4d87832d543e64
SHA256

402c1be2b50db9a10a31877d10f1278bae07260395e25c8e62933b74fe9e7ba9
SHA512

d74f1407cc66c044afa81a7079ba5b57edecba79892d6b9c7896b47d1cdade3b087c1f720446d2065483f9d91598fd2a93e0aa58a68e3530d9fb66745b29b2a3
SSDEEP

192:unSR6bgY2t4xBss895+NrtuPHFkKdN8EKuW5:uZXYgNBuPHKEw5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
745818879f91dfafce5bcc163f410230_NEAS

Files

745818879f91dfafce5bcc163f410230_NEAS
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ