Static task
static1
Behavioral task
behavioral1
Sample
NEAS.49698f4ebbe55c4385a3bed8b0cbb220.exe
Resource
win7-20230831-en
General
-
Target
NEAS.49698f4ebbe55c4385a3bed8b0cbb220.exe
-
Size
65KB
-
MD5
49698f4ebbe55c4385a3bed8b0cbb220
-
SHA1
477d31582f733b0f2124be0d33946958871a1a78
-
SHA256
6e85edd430015d9a3b6283e6970bd6b4e110e38eaaf2d6115aed3514c55e4e73
-
SHA512
5b250eba1fbcf8bd8223af76604383d884193f6793ad1cb79440d848c23ebecbf1c6456af284eccae9901949252f4765a79599649e321c887269203b5bee8609
-
SSDEEP
1536:0gO/kb+KjHTvV0DlPOhGmayygok1T7Mf1lIEH:VF+QzvV0DlPOcma7go889KC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.49698f4ebbe55c4385a3bed8b0cbb220.exe
Files
-
NEAS.49698f4ebbe55c4385a3bed8b0cbb220.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE