Static task
static1
Behavioral task
behavioral1
Sample
NEAS.15ab95d456a83e08c4c22f15514f8b40.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.15ab95d456a83e08c4c22f15514f8b40.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.15ab95d456a83e08c4c22f15514f8b40.exe
-
Size
1.5MB
-
MD5
15ab95d456a83e08c4c22f15514f8b40
-
SHA1
81180f7dd4a8259c6d39285947c23680cfffec4f
-
SHA256
370f64df9f139b8de331c6478df575c0a0bcdb7604cdcee24a5db88ced634880
-
SHA512
c0ad5b4900207c38dcf3e9f99c5dc50928a3fc02e3ec41ade5ce1a6a4adbb96a0cc97d9331d0191b5ca101005ecb9da351ec29c89050fba470dce7a24fab5e50
-
SSDEEP
24576:C2JvMGGGHxaMLRBuChXPzb3CnS+NzKa+hq8xC8iPs5WFN:CCMrGHMcR1EUa+YSC8iPsQFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.15ab95d456a83e08c4c22f15514f8b40.exe
Files
-
NEAS.15ab95d456a83e08c4c22f15514f8b40.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE