ac5d5a60f5b5f2cc3d385836b4f9bde0_NEAS | Triage

Sharing

General

Target

ac5d5a60f5b5f2cc3d385836b4f9bde0_NEAS
Size

6KB
MD5

ac5d5a60f5b5f2cc3d385836b4f9bde0
SHA1

27d17caca24336497ec606fd24a1775679eba509
SHA256

d14c4e6585a4c5e8b89e7f7d280800f18bc4b6ef997d91fa81ceedbb6940f893
SHA512

498b955c3f555d2218cba3b7b2602d2173d06a67753413090ab0ed7b8ba9ff4c7dddf8e66e6aca3df63509c77b0abce6e0b3831322f6e3b9d5b44dc6a91102c6
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIUTvyoMHS7lUe5C0Drbre:unSR6bgYfe3HSOeA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac5d5a60f5b5f2cc3d385836b4f9bde0_NEAS

Files

ac5d5a60f5b5f2cc3d385836b4f9bde0_NEAS
.dll windows:5 windows x86 arch:x86

33eb74cdd77dab1b168bbaa130115a9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetProcAddress
LoadLibraryW

user32

PostMessageW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ