Static task
static1
Behavioral task
behavioral1
Sample
NEAS.4b6a3d377764f6cf252b5da606767c90.dll
Resource
win7-20231023-en
General
-
Target
NEAS.4b6a3d377764f6cf252b5da606767c90.exe
-
Size
120KB
-
MD5
4b6a3d377764f6cf252b5da606767c90
-
SHA1
47dc583988e9e11d780669e936166ddcaabbe570
-
SHA256
1f0764db86f3ae2bf3443ee5717d97f80760b9d3a424607436771547e1f9d12c
-
SHA512
4bfc4710e5a7f0469557406412dbca7d3ce0675330c662c382005c077e24b2dd4509e22ab6e6f0d83965df23aa6c463454c5d11c37c4f5d37ea57b8cf813fdac
-
SSDEEP
1536:faXEH65/AevqogxWeBGqKitZsuCnxAoCaVuyT4B6Zp+4gJQ17LszrpB0HKOhvhU7:yXwzinxUaVXTE6T+HJInszrpGHKOp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.4b6a3d377764f6cf252b5da606767c90.exe
Files
-
NEAS.4b6a3d377764f6cf252b5da606767c90.exe.dll windows:4 windows x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ