Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2bf1417b751b37691b471437349dab20.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.2bf1417b751b37691b471437349dab20.dll
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2bf1417b751b37691b471437349dab20.exe
-
Size
148KB
-
MD5
2bf1417b751b37691b471437349dab20
-
SHA1
f694e7739fd818f044390b3558620891bd317749
-
SHA256
ecb5b23740932c4999b57365fd6c685a81f13e822eac47cefa412484fa285b3d
-
SHA512
67a989eaff4a8f21ff86d5d89052e4d3e834db388fd39d6edfb34fccd1b2ac8a13d401ebf57fb04071e975a4e39ac968047856d666e18930b236358d97b3078b
-
SSDEEP
1536:dOkCgmGFlxXGrzmmWHY25N27S9zqJ7RFS:dla+vSoD9zuHS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2bf1417b751b37691b471437349dab20.exe
Files
-
NEAS.2bf1417b751b37691b471437349dab20.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ