WMainA
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.043922d5b5f843a231cdfcc5e9632290.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.043922d5b5f843a231cdfcc5e9632290.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.043922d5b5f843a231cdfcc5e9632290.exe
-
Size
960B
-
MD5
043922d5b5f843a231cdfcc5e9632290
-
SHA1
8d552d1452a1f74d142ddade280178bde78ac586
-
SHA256
e74bd909f36f146ccdde0502b6f0107a91f172932cbbe0107efb0b913299ca86
-
SHA512
7794ec12bcade4e65c5e8f98de2b1e4b55141a079ba89efb791f39f02fb3545aeadc4c21ef357ac3a825de15b680362f99e777c3adb4e226c9b3b92a451c7f7b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.043922d5b5f843a231cdfcc5e9632290.exe
Files
-
NEAS.043922d5b5f843a231cdfcc5e9632290.exe.dll windows:4 windows x86
2f3c5da38e687ed8e68cd2b55dbd54f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
Exports
Exports
Sections
.text Size: 320B - Virtual size: 297B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE