Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e0dd58b6add92a505068b84ffd2a08e0.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e0dd58b6add92a505068b84ffd2a08e0.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e0dd58b6add92a505068b84ffd2a08e0.exe
-
Size
296KB
-
MD5
e0dd58b6add92a505068b84ffd2a08e0
-
SHA1
80d52413210cc16a0f1bc163aa2a0430913bcf66
-
SHA256
aeb5004f72c79e8342daff7e500de0196e9360981838ea43e61e1e36bc3b5394
-
SHA512
aed1d2ff5a8b19f38e113a5b026bc01b9d1e0447f802535f7a0033dbca7a8f7e51025fafcfa430284fd98d93a96d304b1398e0746fa7c35198c025fe33215bb4
-
SSDEEP
3072:f/i4ppE0WMdZVv3R5DkWluEjAgdNs1mLNZZsI1Ei69zvz+42Eg59RIfufHQRrqzg:faqp5WMl3QzvyKmIfWvq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e0dd58b6add92a505068b84ffd2a08e0.exe
Files
-
NEAS.e0dd58b6add92a505068b84ffd2a08e0.exe.dll windows:5 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.more Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ