Static task
static1
Behavioral task
behavioral1
Sample
NEAS.65188dd69d74ac8228b7556515ad3050.dll
Resource
win7-20231020-en
General
-
Target
NEAS.65188dd69d74ac8228b7556515ad3050.exe
-
Size
120KB
-
MD5
65188dd69d74ac8228b7556515ad3050
-
SHA1
5bcef795e861d4cae8685fdb270ade9b9435b6f8
-
SHA256
2738d4afc6212422b69fa54ea55f2aded4101fe29e3c59289899c056e035c84c
-
SHA512
fcc7ed00dd3689e9078bde815fe49649193acc76abd414e49420a9d3f887eaf103d4028d733e62e0fe5b8fe7f8e86eec61a7780e47bfab6d13a69993f645af0c
-
SSDEEP
1536:3oqx6l/Aii5ZTQNpYnqo4LZU7dXd0N/GtqFGS1kcfYuamtwbmSGq:4NlT80Nq4LIdN01GsGoPYu3twKc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.65188dd69d74ac8228b7556515ad3050.exe
Files
-
NEAS.65188dd69d74ac8228b7556515ad3050.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ