Static task
static1
Behavioral task
behavioral1
Sample
NEAS.370b346b882f0ee564805f3be3f204b0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.370b346b882f0ee564805f3be3f204b0.exe
-
Size
6.0MB
-
MD5
370b346b882f0ee564805f3be3f204b0
-
SHA1
fb825c838c353a0db2733c0b0adae3037e745946
-
SHA256
9d082656b4c98e039858594552aea111e940490f28ac0fe39311631af4d491fe
-
SHA512
4ea09c97cdf88a727ad89d00573b3ce8fb1fc451ebe15ebbfe6adb2df438e692774a0eec8c3466f69a28050aaf956af6e48428692d69ae48113837975db1b854
-
SSDEEP
196608:Xc6cTE7GmpjeBXIlL9p9j1F7ESL3S6/mCpCw+rmScI7:eyZUX6z1F7ESzj/nibcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.370b346b882f0ee564805f3be3f204b0.exe
Files
-
NEAS.370b346b882f0ee564805f3be3f204b0.exe.exe windows:6 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.8MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lcniutvz Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtmmpnse Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE