Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ac02792698d59fb4880ec7f5e4553e0.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8ac02792698d59fb4880ec7f5e4553e0.dll
Resource
win10v2004-20231025-en
General
-
Target
NEAS.8ac02792698d59fb4880ec7f5e4553e0.exe
-
Size
460KB
-
MD5
8ac02792698d59fb4880ec7f5e4553e0
-
SHA1
68d7e61d518e072f96adf79160f1c9fd00cb6fe4
-
SHA256
3b13278370e17a5c0e71a1801ddcc8a0eb6d21225360dd3e79404624030b3473
-
SHA512
197c3b8bfc37e890e234862f793fd1495bc290d5056b945ea087cbd9a7b8ca4a7e1d432dc02666c854c7d35b191ec00423935eed75cdc990faf1f8532be3b2aa
-
SSDEEP
3072:v7XAA0vXXGNOrw/MpcjtcKZkjXlDA5PtuO6o0BZ2gBM3/7juNyfMFk:TAAiXXHcpcBXRBO6oiZyiNyfgk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8ac02792698d59fb4880ec7f5e4553e0.exe
Files
-
NEAS.8ac02792698d59fb4880ec7f5e4553e0.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE