Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bf11d404176310f478a54acbd5e1c7b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.bf11d404176310f478a54acbd5e1c7b0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.bf11d404176310f478a54acbd5e1c7b0.exe
-
Size
28KB
-
MD5
bf11d404176310f478a54acbd5e1c7b0
-
SHA1
2352cf50ec9631bd2568a2a21210ef8f0bec7a6f
-
SHA256
ada856b517643c5ea995b04242bd78effa84af3b00ca1eaf526c57eff7c8e27f
-
SHA512
ea93467422750ffc45d9c83fd9cf90f6c4e27c46a5a641d4b32c8cd70157482bf85e3bccbfd238bdfef929d6d1a7744c65c4d716c413c2e0ca04bfc4d0880c04
-
SSDEEP
192:ixCEngxVufjaMWGexxmml3RW7DKZgrLw3CvpY5pPXCJsky/TjJUFeW/eG96:ixxkGex8mlEDKZgrWCvpAAstLjmE06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bf11d404176310f478a54acbd5e1c7b0.exe
Files
-
NEAS.bf11d404176310f478a54acbd5e1c7b0.exe.exe windows:4 windows x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE