Static task
static1
Behavioral task
behavioral1
Sample
NEAS.14f641a66ab2656c7f579c552e4a62c0.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.14f641a66ab2656c7f579c552e4a62c0.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.14f641a66ab2656c7f579c552e4a62c0.exe
-
Size
284KB
-
MD5
14f641a66ab2656c7f579c552e4a62c0
-
SHA1
ce8c392c011338dc18287281179aecfcafe86f06
-
SHA256
eb57aad3ec19b83345c9950e6dd3572503cb7fc53cc2e086bc390e7f2e60dcc3
-
SHA512
fc1cd91c70d20cc6c00061916f2f26e4868d1a45792cb08edf369f2e4cc0d18b29c21bcc8f57de7aa927ff3d0b382b7e10b8cf2e196f942bb51d2a49203bb59a
-
SSDEEP
6144:/z6tAzpRqQ+l3jCQDdyo96MrAEFxZzZ35iZTIfNd:/zQAzpgQI3WiyoFVZ3Lfj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.14f641a66ab2656c7f579c552e4a62c0.exe
Files
-
NEAS.14f641a66ab2656c7f579c552e4a62c0.exe.dll windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ