Static task
static1
Behavioral task
behavioral1
Sample
c1a0e2d467153620d1d4b57f4a5412a0_NEAS.dll
Resource
win7-20240221-en
General
-
Target
c1a0e2d467153620d1d4b57f4a5412a0_NEAS
-
Size
120KB
-
MD5
c1a0e2d467153620d1d4b57f4a5412a0
-
SHA1
ad21358b5db98485f6d9e031dd32c1511601deae
-
SHA256
e3885a60cb33ec5fb3f548aba3615b0995d9d594d713a8a79c7ccb96be628ce3
-
SHA512
906ed59f36ffacbbeab332cabb4d2f4d12aeaffdcfa0c635e03341e8dbbd2b8d59676997d5d346451d84b751b57b003d104334f0c76e7d17975b8e12c0d09859
-
SSDEEP
1536:GRbel39BqfZb7v6HuIewXFSTY3Hp5S6/RWuQk+yxoK7cUyx5dLgrZnalXB/llka+:lgldrYKAxBwBx5dLgclxNj+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1a0e2d467153620d1d4b57f4a5412a0_NEAS
Files
-
c1a0e2d467153620d1d4b57f4a5412a0_NEAS.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ