Static task
static1
Behavioral task
behavioral1
Sample
NEAS.645da147f59a5e503ae8522358afe7b0.dll
Resource
win7-20231023-en
General
-
Target
NEAS.645da147f59a5e503ae8522358afe7b0.exe
-
Size
120KB
-
MD5
645da147f59a5e503ae8522358afe7b0
-
SHA1
a4d6da358c5285ea052e0cc6814afb1de6c6a48a
-
SHA256
037f0188662c0c48c70c69243393446fd89ad3f3a8d4a7a696467709290e3ec7
-
SHA512
73b1f0dd5dfbd48740a026ccf5c99ca1eb82745b37a45a6a3a20174be88a7ff8cf0955722ecb08739293ac79f3c24f7bfa5402c3affa64716386093da977b35c
-
SSDEEP
1536:RYBmlO4qF5ZiHCLPGOlFrhIlwlERsluK7gL+2i8YXYOFIxJbIbu2baJE1h:RYBmI4qF5cOj71Ik5lxU+2MebWFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.645da147f59a5e503ae8522358afe7b0.exe
Files
-
NEAS.645da147f59a5e503ae8522358afe7b0.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ