Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6048cedbe80a15b77b7bb8af7be39ab0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.6048cedbe80a15b77b7bb8af7be39ab0.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.6048cedbe80a15b77b7bb8af7be39ab0.exe
-
Size
280KB
-
MD5
6048cedbe80a15b77b7bb8af7be39ab0
-
SHA1
775aaef4e125220b693c738072cb193fb8089156
-
SHA256
3499b27d5a0adcb2be233157021d19585e2efd418f6cc1744e3b517043b4acca
-
SHA512
7308a162ade8c8e1b6e4537e3d2e9727a940e7b4a5cb0bab620ae4ac0e895c6587b4210a9340e530c78836529cec0a1eaa4474996b75f18001ecf6146921cdd1
-
SSDEEP
6144:YrUIlpf18BVgdEC8eFOIdi2j7E4kUBxzYXwOq:YAeT87gVYgO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6048cedbe80a15b77b7bb8af7be39ab0.exe
Files
-
NEAS.6048cedbe80a15b77b7bb8af7be39ab0.exe.dll windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ