Static task
static1
Behavioral task
behavioral1
Sample
NEAS.514c469b52da7898b1031cb564ad98f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.514c469b52da7898b1031cb564ad98f0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.514c469b52da7898b1031cb564ad98f0.exe
-
Size
160KB
-
MD5
514c469b52da7898b1031cb564ad98f0
-
SHA1
1af979288efdf99a41c73ab32d09483791c06dd6
-
SHA256
e740d8ce716f8f23296153a1ce69a5abccc56bd41b1806c4a8dfde48bce3f8b4
-
SHA512
ee1ce3986e9f17cb0304f5fd4154eca3040034805192bf750c16a0c5e814225087cb847463f71c6ad0c5311c209b6b6bb24b2c1f515d6ee270f55bdbd5aa1d07
-
SSDEEP
3072:eEX9m+KA5vNnmOt3wfFmICh7EvnMZBKFZAAUnjlfZ+gltv8+zV+khVzoI7h+aS1b:eQXNmOt3w9C+vMbCCAsjtBv8yV+khVzE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.514c469b52da7898b1031cb564ad98f0.exe
Files
-
NEAS.514c469b52da7898b1031cb564ad98f0.exe.exe windows:4 windows x86
73ec795c6c369c6ce2c3b4c3f6477daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 32KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 48KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE