Static task
static1
Behavioral task
behavioral1
Sample
NEAS.18e1964c4954cac8544673f83366e610.dll
Resource
win7-20231023-en
General
-
Target
NEAS.18e1964c4954cac8544673f83366e610.exe
-
Size
120KB
-
MD5
18e1964c4954cac8544673f83366e610
-
SHA1
eb3b8e68956279229e6c9bfd6ca3fec4b6ec2c48
-
SHA256
9d3e4bac424afe49fa90c3d69ef1f7d957a355e9fc3c6fc03ede63735800d842
-
SHA512
466c82d569b51ac8a1585e14fc106c3535d0effbcf0b9992bd1db6cc3dcfc1d34d1aea028f3f3f87d8a17c9d32ae92d1274694edc9cb2946fe5f91fc53f91719
-
SSDEEP
1536:wOaYcpy3tSBbk04TMjAhQ0wfxKz/Zbf3+Pl6U+tUys0rkiDZs2qXOico5+c:wOi4IeIjP0wfmRfdnrnu2AEm+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.18e1964c4954cac8544673f83366e610.exe
Files
-
NEAS.18e1964c4954cac8544673f83366e610.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ