Static task
static1
Behavioral task
behavioral1
Sample
NEAS.489e10c120334bfa5a672da9bc6bc500.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.489e10c120334bfa5a672da9bc6bc500.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.489e10c120334bfa5a672da9bc6bc500.exe
-
Size
112KB
-
MD5
489e10c120334bfa5a672da9bc6bc500
-
SHA1
cdf1924ed17f0b943df6598070b242cf935ded88
-
SHA256
c95f6e45d3ca865f099445d69f42b3cd3feebec881d6b9cd92713cea0ca45917
-
SHA512
63061928da1627dadb7b84649e2c8ba7097ce4776cb59c8e42c14e6d90883af702f06b1970ecf328ecaeac246f4f3de81aa92e9bbbdd503958b2e073be1d0c92
-
SSDEEP
1536:ZB7cRZ4RwOEbyERnXNPwGBm4g2l3Ig2G8QvRmCacChQt6xVjzDsxnGhwIpyF:LcwRFsZRXNPw7G8Qv0dh7T/6IIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.489e10c120334bfa5a672da9bc6bc500.exe
Files
-
NEAS.489e10c120334bfa5a672da9bc6bc500.exe.exe windows:4 windows x86
a92b57a3fced8b6bae5e4f2c9cede57a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
ord522
ord528
ord561
DllFunctionCall
ord670
ord672
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord542
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ