Static task
static1
Behavioral task
behavioral1
Sample
NEAS.286e6e2ab4f75a08004ac88c62e8b6a0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.286e6e2ab4f75a08004ac88c62e8b6a0.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.286e6e2ab4f75a08004ac88c62e8b6a0.exe
-
Size
4KB
-
MD5
286e6e2ab4f75a08004ac88c62e8b6a0
-
SHA1
dd831fac05add943fdd5f61b775450ae71596e89
-
SHA256
bf1f5847b1b2b631aa7229f0b288e7b679627b457a4a4244fd6298417b17284b
-
SHA512
c4f0c8dde7fd68c68c7c1de02b630c63f8346402d4bb6e477ef1b89ca170ad7b24b61e28b312c2cb7359f85c7bd0d437ae39abe13b2522adef0135962a3811db
-
SSDEEP
48:i6tWYscqWe1ghkW5ZadbkVnVLfly0qPLDplfRbddhDfhUp1wdVU5T:Bscq1nWMOVLM0mLDnTfhC+e
Malware Config
Signatures
Files
-
NEAS.286e6e2ab4f75a08004ac88c62e8b6a0.exe.dll windows:4 windows x86
43f81cd49848f8282ffd7efa73645df8
Code Sign
0a:d0:9d:9d:da:4d:0b:8f:4c:a2:a5:9a:9a:6a:b3:a5Certificate
IssuerCN=Root AgencyNot Before18/03/2011, 06:00Not After31/12/2039, 23:59SubjectCN=key,OU=WWW.CeleWare.NET,O=CeleWare.NET,1.2.840.113549.1.9.1=#0c0f6b657940486f744d61696c2e4e4554Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBeep
MessageBoxW
kernel32
ReadFile
lstrcmpiW
GetModuleFileNameW
GetSystemDirectoryW
lstrcatW
LoadLibraryW
ExpandEnvironmentStringsW
CreateFileW
GetFileSize
VirtualAlloc
GetVersionExW
GlobalAlloc
CloseHandle
CreateThread
msvcrt
memcpy
wcsrchr
Sections
.text Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ