Static task
static1
Behavioral task
behavioral1
Sample
NEAS.adfb00fd293a6a7db34bc511bf903840.exe
Resource
win7-20230831-en
General
-
Target
NEAS.adfb00fd293a6a7db34bc511bf903840.exe
-
Size
481KB
-
MD5
adfb00fd293a6a7db34bc511bf903840
-
SHA1
cddc57e165201327a7808b8491df240c9be7708a
-
SHA256
284ca39d6009808d8dd829c562548cde835d0e9a29f123a4e314356c30073025
-
SHA512
8db65eb6de036e7ea29a6de55df525a3873f13b5456e5a86c776d1bf777c8dd4626e0e3ef941e4f2b805889a2031b462e1bd12b21d6f7f22e295618aeea244bc
-
SSDEEP
6144:UcOp9GYAGwb0IVHOLXZcv5fSGxQ+qtJB8TwND7GbG2+k3isJ9zsbl6lJGilgE:Uc2rM0IVucv5/qtXxybG2+kSSKbl6lJb
Malware Config
Signatures
-
AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule sample autoit_exe -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.adfb00fd293a6a7db34bc511bf903840.exe
Files
-
NEAS.adfb00fd293a6a7db34bc511bf903840.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ