Static task
static1
Behavioral task
behavioral1
Sample
NEAS.490f1be8b6b6e4284b6bcb626b5b0ed0.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.490f1be8b6b6e4284b6bcb626b5b0ed0.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.490f1be8b6b6e4284b6bcb626b5b0ed0.exe
-
Size
296KB
-
MD5
490f1be8b6b6e4284b6bcb626b5b0ed0
-
SHA1
bb38a8c5d0b091a4f34ee0063d0ab0363e9d3c25
-
SHA256
0ba141092eda49acf339f579e47a41cbda28e8f05422fcb8a5110b0e0f06a8fa
-
SHA512
973cc05ed94c6346044a8d0a793181b6586e1dc181d49c357815c46a6fa46b01a305e2782bcb2e8b82536b166b57b365baed5a47fd56ea71c419e2bec747780d
-
SSDEEP
3072:2EziCxCWsXa3LLThwDRn1plG7yQ3fhhhxEAlEg5r9zLqR7Y7l+Yw15Oc4N1y:2EuCxt17LTk+hh+R/Y7l+Y2O5N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.490f1be8b6b6e4284b6bcb626b5b0ed0.exe
Files
-
NEAS.490f1be8b6b6e4284b6bcb626b5b0ed0.exe.dll windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.more Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ