KbdLayerDescriptor
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e99477b7eea2329081ee6a908b208770.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e99477b7eea2329081ee6a908b208770.dll
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e99477b7eea2329081ee6a908b208770.exe
-
Size
6KB
-
MD5
e99477b7eea2329081ee6a908b208770
-
SHA1
6095c10301c07b45333c590c9dc5d8f7776acd90
-
SHA256
9a29fa6e3be64195a2fce194e26ba11b3ac0288030e8126d2c10b2539eae245f
-
SHA512
e050ccf589d73bbb5f17ea95859ff9dadd681f502a5536c59e9f19584a414cf8e12f1ef454e828e1453a6e7debb2615bb54d4d5a3c2f5dfb7f1e911592e60944
-
SSDEEP
48:6tNOjDxNJnieHlqMqQfvT/hcekQh4slZTRoYYZgypeARm1kmReqRNc6NVdWjpjAx:KN0is4Mqwbke42loYYZm1kaNc4iU6qn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e99477b7eea2329081ee6a908b208770.exe
Files
-
NEAS.e99477b7eea2329081ee6a908b208770.exe.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 79B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ