Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f3cb6c369411a73508f49d0cab3b73b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.f3cb6c369411a73508f49d0cab3b73b0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.f3cb6c369411a73508f49d0cab3b73b0.exe
-
Size
66KB
-
MD5
f3cb6c369411a73508f49d0cab3b73b0
-
SHA1
b86c2b4ad2605ece16fbf8e445209a33c9c10eaf
-
SHA256
2bafa773d3fb0084085687fddcea70d8b635cb73e96226423e20f3670b49fb59
-
SHA512
d390a3d3d291552aed8e1cfdac0bbf178074fa74d41365313edd6f0e86721858821d0b82788a7df64dd62d1d03f3ce4e82ee75fcc2fa25003bd72fb04d8f09d3
-
SSDEEP
1536:/zths4t1xYhvpaB1NNFjX25hfEK/KTo+/aFYhE:7kRxp2NFjGjMK/KTo+/iEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f3cb6c369411a73508f49d0cab3b73b0.exe
Files
-
NEAS.f3cb6c369411a73508f49d0cab3b73b0.exe.exe windows:4 windows x86
631932c1c19721bace3272bb3ca660b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventExA
GetConsoleKeyboardLayoutNameA
GetStdHandle
GetProfileStringW
GetCalendarInfoEx
K32GetModuleBaseNameA
WaitForDebugEventEx
EnumSystemCodePagesA
ClearCommBreak
CloseThreadpoolCleanupGroupMembers
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE