CallAndWait
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.da14dddb38985169062710485833a690.dll
Resource
win7-20230831-en
General
-
Target
NEAS.da14dddb38985169062710485833a690.exe
-
Size
111KB
-
MD5
da14dddb38985169062710485833a690
-
SHA1
fde1054d6f1491fe84661c394c455dfd197a2327
-
SHA256
216e0ce6051a1e3bec889de3aa073537fbca1a98dc1f83ab51872606b224e9b3
-
SHA512
bb9c17a9e4446b22b3dfed1a7c1e1c7b54981372eab628cc2cd873d8efb22a8624601f77788d8aabb5c04d45e1810cd7a0ddae70d9bb9dbcb119ed9dff14b8ce
-
SSDEEP
3072:nmfIBxfmeZcvoNp04qqZ0Xjv7eECCLLhQndPwk/qB:nFPOeZDfZ0Tf9LhQnOkiB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.da14dddb38985169062710485833a690.exe
Files
-
NEAS.da14dddb38985169062710485833a690.exe.dll windows:4 windows x86
db2755f409b81c4dbfc04f648cfb80b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread
user32
IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 987B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE