b64d40deb2deee5422b7caf5bbd672f0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64d40deb2deee5422b7caf5bbd672f0_NEAS
Size

6KB
MD5

b64d40deb2deee5422b7caf5bbd672f0
SHA1

4ffa93da78056a39d38dcb53755cdc9f7dad2c44
SHA256

1002bd682b22150d1266b63e1dad211c5a909709c74ee42e832c43723955393a
SHA512

6c5cc63c5df27c8a411e73ca7c08531637cc09bac17171c232b4f8f1dd06b088106d6105605b332655556c35abe85600b9c8a323e70e3493483c8f8dcb81a6b7
SSDEEP

192:F5oLZx3uYpx09n+Wemy3ipGpVuWB/EqWJG96S1:F5mZx3uYpx09n+Wvy3ipGpVuWB/EqWJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64d40deb2deee5422b7caf5bbd672f0_NEAS

Files

b64d40deb2deee5422b7caf5bbd672f0_NEAS
.dll windows:5 windows x86 arch:x86

c4c9ecfc26ca516a80b8f6f5b2bdb7e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
CreateFileA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

rundll32

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ