rundll32
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c25f625348b19e4a47eda7370440bd20.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c25f625348b19e4a47eda7370440bd20.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.c25f625348b19e4a47eda7370440bd20.exe
-
Size
6KB
-
MD5
c25f625348b19e4a47eda7370440bd20
-
SHA1
13496c44c94f09190068b1db3fff3c8c1cf51f09
-
SHA256
ee06ed5fa0a7e7cee92d5d763be51571f4d55e7e01a5ef26b1e1c07aa11bb984
-
SHA512
bec123738dfb8c7f3b9816420029676de7b5e5620ff520f0f1a4519a4c383260c24087d017bd21f41d17e21dbdb2a13cf51bcfdd57d4e2c8541d0a32bd61a51b
-
SSDEEP
48:CCy86+Wet9Q/iooHeiefhe+/lSMYEqvZXb9ZjU9xUPHdJ1zyulFad2SATO9GWsZ1:hy859x0P8MaJZ9U9xktYNUZ5TXArX7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c25f625348b19e4a47eda7370440bd20.exe
Files
-
NEAS.c25f625348b19e4a47eda7370440bd20.exe.dll windows:5 windows x86
c4c9ecfc26ca516a80b8f6f5b2bdb7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryW
GetProcAddress
CreateFileA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ