Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3682acef411f2cc9fbed4d768ff2dab0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3682acef411f2cc9fbed4d768ff2dab0.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3682acef411f2cc9fbed4d768ff2dab0.exe
-
Size
284KB
-
MD5
3682acef411f2cc9fbed4d768ff2dab0
-
SHA1
218b9ae4d01f10f1cc3b9f31d5b3350fe7ed3eef
-
SHA256
37acfed6eabf701155da9f224d6a3191ac82242ec105dab4392a4a39154ade5d
-
SHA512
5a04fab5524c963c609d0639dad82f89594a79d14eade28a21fafe53f996a8ba78714594aa9fd095cf5f9bead3c2cf304a3ec9eff3496abda1124f6653c4f054
-
SSDEEP
6144:wAlZ/D7ydGWYp3pGsxXCRG4ktf0qsTvHozwh1Yo3XWfEc20iTKci/74me55huuIx:dlZ/D7ydGWYp3pGsxXCRG4ktf0qsTvHk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3682acef411f2cc9fbed4d768ff2dab0.exe
Files
-
NEAS.3682acef411f2cc9fbed4d768ff2dab0.exe.dll windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ