iconv_module
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.51b6826bdd523fd998281568e7965220.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.51b6826bdd523fd998281568e7965220.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.51b6826bdd523fd998281568e7965220.exe
-
Size
13KB
-
MD5
51b6826bdd523fd998281568e7965220
-
SHA1
5273007f56e156dde12b81849b37e8c1784c6ecb
-
SHA256
b04e0f6be514b431d44cf286da0d12270cf829f1ab9d428af92c448b29b77f0f
-
SHA512
96c1fa2add908f865854d1b742923695767313da99ab5c29aa2cda370e248d9eca647c2ce36521d888b108145ef9b54a8b6ff057f5cfaac20517abfbef0c87c8
-
SSDEEP
96:X53qecQRpbI1NVwufkDy9iOQFfdD4iJBWfs4ZIrSQf0Dq66kVsYC/fl9XCDPk:X5ae5pbI1ook2zo2VE66kVkyDPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.51b6826bdd523fd998281568e7965220.exe
Files
-
NEAS.51b6826bdd523fd998281568e7965220.exe.dll windows:6 windows x64
d1e8f80f00a19e212abb1df988dbacac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
libapriconv-1
apr_iconv_mod_noevent
kernel32
RtlLookupFunctionEntry
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
vcruntime140
__std_type_info_destroy_list
memset
__C_specific_handler
memcpy
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ