Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9f3c7e1446b45463205bcfa9f5334b10.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9f3c7e1446b45463205bcfa9f5334b10.dll
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9f3c7e1446b45463205bcfa9f5334b10.exe
-
Size
256KB
-
MD5
9f3c7e1446b45463205bcfa9f5334b10
-
SHA1
dc41bb1bc59be38cd6b0d36b69285933f1a413a0
-
SHA256
02ae5806b8422ba1800cd91feeff7afc54930c908b33f2ffb7cd04faed706adf
-
SHA512
f981ce7d17b1db5ddb93e0a712ee35da3176589fea8502b9dfda07db922c8abea01246381ceb7f3c711afb307e82ab3dcad879cdb93b56f2e21431cf79a71e90
-
SSDEEP
3072:C7i2YZ/RlWLR2cHl5st3Nf68eemI+vTZg5U1C+cuUZogcWl:C22YVRH9Jlee3kp1jc6Al
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9f3c7e1446b45463205bcfa9f5334b10.exe
Files
-
NEAS.9f3c7e1446b45463205bcfa9f5334b10.exe.dll windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.more Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ