Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e87066d79fa815c013166f36007ffec0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.e87066d79fa815c013166f36007ffec0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.e87066d79fa815c013166f36007ffec0.exe
-
Size
39KB
-
MD5
e87066d79fa815c013166f36007ffec0
-
SHA1
50a061a953890ef7ca4288c7499ed11c55fc46a4
-
SHA256
911b74f7cc33c15aa0b98d271e29bba98a3cb63806c1877777a2bf1516dc1b2e
-
SHA512
78ea39384eebadd1c8949ec31a6081a63e4f15319edceb3feb363940221749155153eb04816ea7a72436a592f663a305847186e56488b923ebb891dd37fa439b
-
SSDEEP
384:u+UuN1kg7x9WHkYK5t24pttObGwl+Yq2M+cn5zI638GkznJCgbYsq+rULUIjgHbf:euN+gX55V7gbGy++cnk3Z1FCg72s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e87066d79fa815c013166f36007ffec0.exe
Files
-
NEAS.e87066d79fa815c013166f36007ffec0.exe.exe windows:5 windows x86
1ff5f432434633aab8fc15061ce55a13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA
kernel32
ExitProcess
CreateFileA
GetModuleHandleA
GetStartupInfoA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
gdi32
GetStockObject
comctl32
InitCommonControlsEx
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ