a9a579826a0c8be3952cdad79103d9e0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9a579826a0c8be3952cdad79103d9e0_NEAS
Size

135KB
MD5

a9a579826a0c8be3952cdad79103d9e0
SHA1

3da3762ea564939be07533f61193e8e23eb35643
SHA256

04703104d83e62028cad6cc26db85a706d4a1e5be20491a3e2aa80db490df1d8
SHA512

1a3bafa9f4f958f60e3c19b3d94fbab63235e9fb288f1553a11d1fcb0e3e0221f5d3c52d2c574e15a923bfb31dc71f8f6d5e3324784a06b31bfe88d92cb0a25b
SSDEEP

1536:UZ9dcnpYwkCcITqkb7VJpHbkb9BVyUT4PQy/3gTWky+XQmLP6XQmLPGkb2dr:UVcnpYwtcIRNYMxPnfYXQ/XQZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9a579826a0c8be3952cdad79103d9e0_NEAS

Files

a9a579826a0c8be3952cdad79103d9e0_NEAS
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\root\95126ce9\6d005bfa\App_Web_rhbshkiz.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ