Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a10b46268413e681d885680401911fc0.dll
Resource
win7-20230831-en
General
-
Target
NEAS.a10b46268413e681d885680401911fc0.exe
-
Size
120KB
-
MD5
a10b46268413e681d885680401911fc0
-
SHA1
8617ed9130e6d33b45ca3173b1071bd6967ee59f
-
SHA256
6a45fbe8ce944939b3e8f36cb343d6cb3791f3d0f6f9e33c3d634392186d5e79
-
SHA512
af411c903035737f1b1a24ffd5a4a67734e482eab167fbcb38773d32cf907eec8594e9fa8307d75808a179a3582f03a093a0a315e676b23cce2f315df15863b6
-
SSDEEP
3072:xSbn9UrT3ubbzzFjlGIehKbj+sHDxbPt/HrDfLkZTxB:cb9ATIXzFjlGlh0iGltTLLSF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a10b46268413e681d885680401911fc0.exe
Files
-
NEAS.a10b46268413e681d885680401911fc0.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ