Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7045971d4fcdd7482f6bbdcd588ef990.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.7045971d4fcdd7482f6bbdcd588ef990.dll
Resource
win10v2004-20231025-en
General
-
Target
NEAS.7045971d4fcdd7482f6bbdcd588ef990.exe
-
Size
1.1MB
-
MD5
7045971d4fcdd7482f6bbdcd588ef990
-
SHA1
bf81ae286d2583aac626560ba4042e47503e4966
-
SHA256
c2a1dcdaa744515a9a195938a4c81d27fd6e0e852fb77b93048a24c6ddcb4fa0
-
SHA512
df45c9601f34294fc27e1518e5823b6eb5fd607172c32f02121a7bc7961d8a5b706c1b1bede862dc475dd1eb92cc377f6eaa29df6708b2e167f14238b2296df3
-
SSDEEP
6144:sf0whtg17aVyTt1xbTmgl8rhDM/2yT/vYz95LXQkJh0Xe:AU86nYz9JCe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7045971d4fcdd7482f6bbdcd588ef990.exe
Files
-
NEAS.7045971d4fcdd7482f6bbdcd588ef990.exe.dll windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ