Static task
static1
Behavioral task
behavioral1
Sample
7db83e1563345a57d737e4204e49ac70_NEAS.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7db83e1563345a57d737e4204e49ac70_NEAS.dll
Resource
win10v2004-20240419-en
General
-
Target
7db83e1563345a57d737e4204e49ac70_NEAS
-
Size
1.0MB
-
MD5
7db83e1563345a57d737e4204e49ac70
-
SHA1
e12d8aa7e10e0f13e1b44777b1fd53e187b6ee46
-
SHA256
9aed23773fd164afeed22ff1bdb909047d07fdfa88c0f0386ebf78c2a7ef9285
-
SHA512
e95272c57f5eb341dd295655afbe4375259237912f5628ecd1b638a6d844e779105cc6f08ffd15e6946800efef5df656e5965d4c90f7868808e7a7bbbc621ad2
-
SSDEEP
6144:R3RVll9pVS0ecV4N9D0iQAdsq1uf9EMUpJ15BsVNFa9dq3NJY7Yj0aLC/lla+nam:HVlTwr9/QsY92s3dL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7db83e1563345a57d737e4204e49ac70_NEAS
Files
-
7db83e1563345a57d737e4204e49ac70_NEAS.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ