rundll32
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.048cddd0f8658d07eb139b6c5bb6fc00.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.048cddd0f8658d07eb139b6c5bb6fc00.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.048cddd0f8658d07eb139b6c5bb6fc00.exe
-
Size
6KB
-
MD5
048cddd0f8658d07eb139b6c5bb6fc00
-
SHA1
3d2636a80357a81511c6f622919d86f4c378342e
-
SHA256
a36bb9f478f52a40237ced8242f0fcd3aedd6e0a0fe0d005252ae557a5b1b513
-
SHA512
41e5ccbe6e7af7e3fb0df9b0101b8dc41495e7059d05936fea4a03b6bedd0b6be5978603de63b55dae738866d9f6263afbd17fcfd9e075f3d322b757bf655a07
-
SSDEEP
96:WLRxkjujtjd8jPjcZG2UorBuLnnWyNg1lQlh26yd+6DB:WtqKR6bgYIrBuLni1h6yd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.048cddd0f8658d07eb139b6c5bb6fc00.exe
Files
-
NEAS.048cddd0f8658d07eb139b6c5bb6fc00.exe.dll windows:5 windows x86
0e851aab9309cf15af44aad3eee1f0af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
CreateFileW
GetProcAddress
LoadLibraryW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ