Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ccc98e78e901037b471853675b24d200.dll
Resource
win7-20231020-en
General
-
Target
NEAS.ccc98e78e901037b471853675b24d200.exe
-
Size
120KB
-
MD5
ccc98e78e901037b471853675b24d200
-
SHA1
4e18cabdaa657c201343ddd052e82ae5b4eb1612
-
SHA256
17088a6d1e266ed17dfaadb9b3fdbde8e67e63d50c6935776012426f1e2a0790
-
SHA512
da73e28a1137543737222cd49e2b5d061a8759d737acdb54173c824198ba4709c1f8537b1b85b3c9b3f1d44724a16af969767f425bf051c091abfd524d8a63d1
-
SSDEEP
3072:z3evtJRgITEDBs2QPrKrcm63byIFGp0ZdobZ7X:GlgIoK2NZtiZd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ccc98e78e901037b471853675b24d200.exe
Files
-
NEAS.ccc98e78e901037b471853675b24d200.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ