Static task
static1
Behavioral task
behavioral1
Sample
NEAS.50210cf2161f0f782fa8e57cc99be3f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.50210cf2161f0f782fa8e57cc99be3f0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.50210cf2161f0f782fa8e57cc99be3f0.exe
-
Size
63KB
-
MD5
50210cf2161f0f782fa8e57cc99be3f0
-
SHA1
2d8915a8535ca78616923cabdfcb73dffc3b1483
-
SHA256
3e51a79bffd0e03e2e9ada4a4368bd36bc05bcf2c116a74f9479891321c7d39c
-
SHA512
a834651732af13ba5c2797e8c37709b776b9c090962432037da54801c22cc21459c13d65fa13d1579d89700faa8b68e9cb815c4bbfe0057b2771213b9adb0cc9
-
SSDEEP
1536:OyKK1vPCAoC2Zonb7T102LSE9URgSUUyChYShQ5:zKkvKCFb7JlLMRgSUUyfShU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.50210cf2161f0f782fa8e57cc99be3f0.exe
Files
-
NEAS.50210cf2161f0f782fa8e57cc99be3f0.exe.exe windows:4 windows x86
1bd0994e4a5da6e82bb43daf8c8b1693
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
WritePrivateProfileStructW
DebugActiveProcess
SetConsoleTextAttribute
EnumUILanguagesW
WaitNamedPipeW
SetCurrentDirectoryA
SetConsoleTitleA
GetFirmwareEnvironmentVariableW
FindNextVolumeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE