Static task
static1
Behavioral task
behavioral1
Sample
NEAS.215fbf91097e2f87780e1f0536be68e0.dll
Resource
win7-20230831-en
General
-
Target
NEAS.215fbf91097e2f87780e1f0536be68e0.exe
-
Size
120KB
-
MD5
215fbf91097e2f87780e1f0536be68e0
-
SHA1
9410ff07509f76402fe800af67cba01254ba6263
-
SHA256
860c4a911de75858cee7790f10968dc4cf059244b66e2300c11601ab43175c80
-
SHA512
6b766f8d5117009b557c6cdb6cb4c9c32602ddbad51f25a1f161974dd6b358b824be8cb73295d1016dd275cbf3f37c8844c44ce738a2102d8affb894527af5fc
-
SSDEEP
1536:8bUoEesa0LJsB7LKI+uxBuN55BNkeqa87dedZH2++WZhjdylkQsbJfc:8bUo7saDLKvG0JsT7dyZu+hjKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.215fbf91097e2f87780e1f0536be68e0.exe
Files
-
NEAS.215fbf91097e2f87780e1f0536be68e0.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ