Static task
static1
Behavioral task
behavioral1
Sample
8396d44f56a3663f0aa363f0086422b0_NEAS.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8396d44f56a3663f0aa363f0086422b0_NEAS.dll
Resource
win10v2004-20240419-en
General
-
Target
8396d44f56a3663f0aa363f0086422b0_NEAS
-
Size
1.6MB
-
MD5
8396d44f56a3663f0aa363f0086422b0
-
SHA1
0a10cf970a72135c99fb42790353417e08c1787e
-
SHA256
83c436b4e38e2b9f4d9b5e637536eeeeb9db0104191766e6e30a0d7217727611
-
SHA512
442dbda2abacc42b2dd108983a2aa59867747778627b9df2fadedc90c7c04df16144f0c7f1e52be05369fed3fcf2d4fb2e430fab66ec785ea9bf39f157fd0fe0
-
SSDEEP
24576:BmW2URMeAPyDGszTtyGz1XOWpnFhUvFFtP4AjxrX+dfpPInHxay3OEOOp9/9BsTC:/RMeFVtyGz1+IFwdp+QHxaE7R/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8396d44f56a3663f0aa363f0086422b0_NEAS
Files
-
8396d44f56a3663f0aa363f0086422b0_NEAS.dll windows:5 windows x86 arch:x86
33e9abdb753c1e74532536354a6d524d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
oleaut32
CreateErrorInfo
kernel32
FindActCtxSectionStringW
GetStringTypeA
GetBinaryTypeA
GetModuleFileNameA
shlwapi
PathGetCharTypeW
Sections
.CRT Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 216KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q8zSJD Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
m299*2 Size: 904KB - Virtual size: 903KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=omat6 Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt0 Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
DATA Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ