Static task
static1
Behavioral task
behavioral1
Sample
2e59440321e9e7bfe463ed1cbc7c1ca0_NEAS.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2e59440321e9e7bfe463ed1cbc7c1ca0_NEAS.dll
Resource
win10v2004-20240419-en
General
-
Target
2e59440321e9e7bfe463ed1cbc7c1ca0_NEAS
-
Size
236KB
-
MD5
2e59440321e9e7bfe463ed1cbc7c1ca0
-
SHA1
1b4be36c3df077a7bc13f5bd130df1ff6899d3d6
-
SHA256
18557cf0ff6f0aeca9d02c66d3f62936d83089795345bc792ed4980b0b236fa1
-
SHA512
57e0d532734c142de49cab1905b97c30bc79d905a59dc9e0b8fa322ae9b621e1d862e515e6e8dcd7337b50b3661c06891184e386aa437321d6b6e852364decd9
-
SSDEEP
3072:6qpqE+OBbe7A3UFaVXXcdQF6SC2OMaF6:fAElxBFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e59440321e9e7bfe463ed1cbc7c1ca0_NEAS
Files
-
2e59440321e9e7bfe463ed1cbc7c1ca0_NEAS.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ