Static task
static1
Behavioral task
behavioral1
Sample
ad5754d1d8924607b5d900ebfcdf28c0_NEAS.dll
Resource
win7-20240215-en
General
-
Target
ad5754d1d8924607b5d900ebfcdf28c0_NEAS
-
Size
120KB
-
MD5
ad5754d1d8924607b5d900ebfcdf28c0
-
SHA1
993d7b6a5697055f795f133b9ac2065014d97e34
-
SHA256
9ebffb2fe099ab96125e72defef8843c4aa929f3a17d93df70ae9849a9e25ed1
-
SHA512
95d88d914005d357a1d40cb809ed1b6ea98a1ab6f0f03e432a77fb278f5981a1be88bdcc74117bb2d3661b953fc45735d7939fb625e4a7d23d947f009ff9d050
-
SSDEEP
3072:Cx2GdsmnnZPi7mnB+VfGqqJWS5HSpTpBPr6W:Oj/Z9o9GqqJd5ypFN+W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad5754d1d8924607b5d900ebfcdf28c0_NEAS
Files
-
ad5754d1d8924607b5d900ebfcdf28c0_NEAS.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ