Static task
static1
Behavioral task
behavioral1
Sample
46fa2ee55ba9c63bf2a9beb3147a3120_NEAS.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
46fa2ee55ba9c63bf2a9beb3147a3120_NEAS.dll
Resource
win10v2004-20240419-en
General
-
Target
46fa2ee55ba9c63bf2a9beb3147a3120_NEAS
-
Size
1.6MB
-
MD5
46fa2ee55ba9c63bf2a9beb3147a3120
-
SHA1
a671961460f7fd5f4eed997f1295785739f9c042
-
SHA256
a8e5fab26bd25b5649ac2c562af66f68362f2c83d77bb44b04f329e8643a994e
-
SHA512
1ca6988cdc7dcfcbb8f0dd00d5686b198db9fa6339e0e2c36de968ade40df994b5659e25d6f8e9ed97c9e371300bdf3195b7554ccefcd8878b94b8e9f0f4f97a
-
SSDEEP
24576:CRUDOf7m4E4NfhYBpeJNOylwYpuhdbfh3isJmqVIX2Oe0XdzgxBBdpmOk:CqOf7L7ipTBYET7h3tDBedm/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46fa2ee55ba9c63bf2a9beb3147a3120_NEAS
Files
-
46fa2ee55ba9c63bf2a9beb3147a3120_NEAS.dll windows:5 windows x86 arch:x86
c742b19310b34123444be3dccf9dffb1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathGetCharTypeW
oleaut32
CreateErrorInfo
kernel32
FindActCtxSectionStringW
GetBinaryTypeA
GetModuleFileNameA
GetStringTypeA
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 216KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q8zSJD Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m299*2 Size: 904KB - Virtual size: 903KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=omat6 Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
DATA Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ