Static task
static1
Behavioral task
behavioral1
Sample
NEAS.aa809fb837a6fa77016388ff27bf3760.dll
Resource
win7-20230831-en
General
-
Target
NEAS.aa809fb837a6fa77016388ff27bf3760.exe
-
Size
120KB
-
MD5
aa809fb837a6fa77016388ff27bf3760
-
SHA1
37e55b62df01dd6a2f1b1cd998db7d5ece15509d
-
SHA256
5fe7393288862cd9fffff12ee9c6c4cfd43bc2fdf4d3f4990de6a25acf0cd6bb
-
SHA512
78ee713fdeec3ab206e4a5094ee53ca490faed003826749d3d49734b647ffd897196b63cb6cba92a7a03d8c026373eda977c328704a1812177e0754e820d5136
-
SSDEEP
3072:ER3WnbQYOAzKEzjm5inZ1o6YCvHLquSk:E0nbH9eEoQ810H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.aa809fb837a6fa77016388ff27bf3760.exe
Files
-
NEAS.aa809fb837a6fa77016388ff27bf3760.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ