�ӳ���2
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b0685207d2d4f6ab8d07bbf367bd2b80.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.b0685207d2d4f6ab8d07bbf367bd2b80.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.b0685207d2d4f6ab8d07bbf367bd2b80.exe
-
Size
392KB
-
MD5
b0685207d2d4f6ab8d07bbf367bd2b80
-
SHA1
418f5c0b7c639638fa198f2570aa8555b9512304
-
SHA256
275f97640a8649dc85b4b91375ba2c2f68c7df06780d6817c18f7d38adfbc58a
-
SHA512
56ea36f6cddda007f29db42a6e72167166dea90fd7e0707ca07a25c578e4d308df9a5edcf0e6ecc04fa51b2dc3c8de23601da8a82e8d4af797c17649bca6938d
-
SSDEEP
6144:gRt1n7lh0gD2rO+cu1kNJBBN691XUqpr4NWTynjjGESTPZna+MPuYoHhK66obAq:Azn7IgQcu1k7C185jjG7B5HQ6rbT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b0685207d2d4f6ab8d07bbf367bd2b80.exe
Files
-
NEAS.b0685207d2d4f6ab8d07bbf367bd2b80.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 391KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE