Static task
static1
Behavioral task
behavioral1
Sample
NEAS.00d0c222e7214e43c4bb5df2ee21e0c0.dll
Resource
win7-20231020-en
General
-
Target
NEAS.00d0c222e7214e43c4bb5df2ee21e0c0.exe
-
Size
120KB
-
MD5
00d0c222e7214e43c4bb5df2ee21e0c0
-
SHA1
fbec14b5cfa2f50384fc419f7176c047ad79566d
-
SHA256
4b0c0a800ba6fa7eab9ce4c332b5f011a0f26da732d1089f4e3a8d9c03667af9
-
SHA512
230c0a6139f9856a965ab69a24e93f5c9f9cb3904f80c8a9730794a238a42aaafab16be6d8c6f129f2f04d6f534a6291580963afae364b2b13da52ca80895ef2
-
SSDEEP
3072:65cgDlF8q8JWdcAnlZ9VQBm45CawqyZY3NQsZLx:2cgDl8JWh9qBm0hyaWI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.00d0c222e7214e43c4bb5df2ee21e0c0.exe
Files
-
NEAS.00d0c222e7214e43c4bb5df2ee21e0c0.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ