Static task
static1
Behavioral task
behavioral1
Sample
NEAS.68bd00ef603ee1bc46b4f6fdd6883120.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.68bd00ef603ee1bc46b4f6fdd6883120.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.68bd00ef603ee1bc46b4f6fdd6883120.exe
-
Size
6KB
-
MD5
68bd00ef603ee1bc46b4f6fdd6883120
-
SHA1
9335c190e7884a7d3086f6312fbc3fec0f974b80
-
SHA256
49f9f2cb16a4f819a5b806b2a8988fa00967704971a3bf43d56874af3fafb3f9
-
SHA512
1e89bdb484c5b3b241238f4e201cc1d70c8d8e216bc3bc23b2e852fbb75c69fe679d90e59bbf86305126876ec024d6bc27abf797455571bc5aa53a4496b106d6
-
SSDEEP
96:9NhF47JdmxpURYyxhZzfRgMHUQrcx9z76hEpEWgpNo6Ww:9NhFgJcxx45OMHUQrG9z7UEqWUnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.68bd00ef603ee1bc46b4f6fdd6883120.exe
Files
-
NEAS.68bd00ef603ee1bc46b4f6fdd6883120.exe.exe windows:5 windows x86
32398d4ef535166fe3a511a0837e8cb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetLastError
LoadLibraryA
ExitProcess
user32
wsprintfA
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 540B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ