Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e1b37d2eb490ec584cfb94d5b636a9c0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e1b37d2eb490ec584cfb94d5b636a9c0.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e1b37d2eb490ec584cfb94d5b636a9c0.exe
-
Size
190KB
-
MD5
e1b37d2eb490ec584cfb94d5b636a9c0
-
SHA1
0700d1925c3f25fd15e56ff2b0b8346e0930c3af
-
SHA256
8fbc66e3fe2c9e820ab1eaba2d350642fcd1a3c156d16cbbece20e511c504c51
-
SHA512
11caa4d688a5b942cc8dfcae446d7567cd92db3c8f9e19a5d8130308149147acf85fd58bb68e94e7f45591f8c34a4dfccf30f7bbb054aadc4fba112ca73dc20e
-
SSDEEP
3072:DH62NCOtOYIGYeaQptlONNdbDzYkVilp:j0V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e1b37d2eb490ec584cfb94d5b636a9c0.exe
Files
-
NEAS.e1b37d2eb490ec584cfb94d5b636a9c0.exe.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ