Static task
static1
Behavioral task
behavioral1
Sample
NEAS.616cb22cc3103998ab1f75aba0dc6480.exe
Resource
win7-20230831-en
General
-
Target
NEAS.616cb22cc3103998ab1f75aba0dc6480.exe
-
Size
135KB
-
MD5
616cb22cc3103998ab1f75aba0dc6480
-
SHA1
341d866a3ef8293a730c220c2e3831cd9075a7e8
-
SHA256
aaecab1c71058cf1acc193cda14fff6f65983f05668b982f71059e6a2bc1751a
-
SHA512
83b945e7f7ed8f7dc3f3e86b21923520bac9e3e60dc9e84cc9cc89373fd67df10465590f128567710dd8597d64d089ad1fd5b5eb67013a58dab37b1f2cf7dbc6
-
SSDEEP
3072:Nr0jDdoQvUVrLeWl6pxIqPW+zI01/gRTghZ6cBZ0LPLo6ENwxxFSC:KKQv+rSppx1c0BgpgmcBw8KUC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.616cb22cc3103998ab1f75aba0dc6480.exe
Files
-
NEAS.616cb22cc3103998ab1f75aba0dc6480.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pecdhnx Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE