Static task
static1
Behavioral task
behavioral1
Sample
NEAS.32bff68a1493ef6d2def230f2b50b580.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.32bff68a1493ef6d2def230f2b50b580.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.32bff68a1493ef6d2def230f2b50b580.exe
-
Size
71KB
-
MD5
32bff68a1493ef6d2def230f2b50b580
-
SHA1
eb47621dbd693cdcbcf4ae22ccc8583a20e208bd
-
SHA256
6cd85526ad74e54c9511db5559ae2651a30748da0f7e3f03292329198f0ebeaf
-
SHA512
285bb27004bb7b4a84ef194dd322317af1143cc9fb0b2934a790285f76b222b8eec47b89ab3291768e526b4b93df8a79ff6f89bfabd1732cf325af8bd86c4fe1
-
SSDEEP
1536:kkw8pUg93/X3tsbfEvyO+FP3vf1zwQVgvXS:kk9nx/NzvX+xn1zwLvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.32bff68a1493ef6d2def230f2b50b580.exe
Files
-
NEAS.32bff68a1493ef6d2def230f2b50b580.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE