Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4c6b8b19a2ee28caf5607bbee0411130.dll
Resource
win7-20231020-en
General
-
Target
NEAS.4c6b8b19a2ee28caf5607bbee0411130.exe
-
Size
120KB
-
MD5
4c6b8b19a2ee28caf5607bbee0411130
-
SHA1
19fc28942de27beeb6bf14a7035e0b193493dea7
-
SHA256
e28681d5dcd9a5f9f2f6ecfd96268be8165f0dc13f83a08620975b8a55ba5b0d
-
SHA512
7b14bbbf6cfcb4cf5b1501f1fcb3512efd9f3e30aae0f4c067a654e005e482acd96a44a6514aa67cf4d814dcb0f272b02c3d4d608c3f2515e94df4d6dba06a05
-
SSDEEP
1536:3gq4d2UMmu2/A7doB6e9/AZ2r7Fe2Ft+fOn6PwovZ+KgtTCVGf5K8ICFQ7AIBxd7:E87aBnA8r5l6f94ePVGf5K8dQx7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4c6b8b19a2ee28caf5607bbee0411130.exe
Files
-
NEAS.4c6b8b19a2ee28caf5607bbee0411130.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ