Static task
static1
Behavioral task
behavioral1
Sample
NEAS.81a38908bbb6d3b7ef863572b072d950.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.81a38908bbb6d3b7ef863572b072d950.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.81a38908bbb6d3b7ef863572b072d950.exe
-
Size
550KB
-
MD5
81a38908bbb6d3b7ef863572b072d950
-
SHA1
3b9f17432493965f6a080f9d2d53aa6d2f6d6961
-
SHA256
723b0ad7b63eba49f5147a0e86a37ba7009130a2a08f36b59c5b128a1114ad7d
-
SHA512
21d6e587af702eb54d9cf25cbb2403614875bf4e63a938844fb067b52380ca22d0506fe785005e014432f57ea323a9be1781eabe15c41fdfd9be18befb4eec2f
-
SSDEEP
12288:oNJEccbVssNJrpcc6hQF8Fcmpyx2p933C8:oNaccbVsOJriHLcmpyx273z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.81a38908bbb6d3b7ef863572b072d950.exe
Files
-
NEAS.81a38908bbb6d3b7ef863572b072d950.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 73KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE