Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6950a8345e545fab8c8a0fc70d82b4a0.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.6950a8345e545fab8c8a0fc70d82b4a0.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.6950a8345e545fab8c8a0fc70d82b4a0.exe
-
Size
72KB
-
MD5
6950a8345e545fab8c8a0fc70d82b4a0
-
SHA1
0f8c92d58e5733c0e9246ede17b16a64c130b236
-
SHA256
afc0864273ab955d134d3001789d42a07927f4eb4a000e54a19aeeb9693e94b2
-
SHA512
abd215bc4f72445c2d956320d173b62eb796709aabfdabae5bacf5a8f9d8d3ee1c7bb613cf79ddd4560209bee91f080defc547c68de1e26e07c7637d759ba1ed
-
SSDEEP
1536:xn1uYJeMw2lM40efx/iTETocEHyQEl2a2dX0+:Z1xcMR6GUZyQqh2S+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6950a8345e545fab8c8a0fc70d82b4a0.exe
Files
-
NEAS.6950a8345e545fab8c8a0fc70d82b4a0.exe.dll windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ