Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b329b3de630e6a830f9d2ebf0f5a8130.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b329b3de630e6a830f9d2ebf0f5a8130.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.b329b3de630e6a830f9d2ebf0f5a8130.exe
-
Size
231KB
-
MD5
b329b3de630e6a830f9d2ebf0f5a8130
-
SHA1
525abd94498129064f397595ca3cdb2b4a94c465
-
SHA256
63cee845aa29558da464263aff58f4126f2bae7cabc44545f482e4918bc1dd2b
-
SHA512
7b3c2345c800f903eddc3f9100582746fc8467a409947df2b9a0ba26b60c5126b7e2c0917b306e8abfbfeb7ce869bf2885bd10878cc2aea2e64a4c37a5b1d9fe
-
SSDEEP
3072:ack4sHDj+8L5cTMOdi5/TYSPXXUv4G4Y8oQIN3C9ISE0qJiNlUdpiE:z6r5cTfS/ZPHUWoQISzqJBpiE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b329b3de630e6a830f9d2ebf0f5a8130.exe
Files
-
NEAS.b329b3de630e6a830f9d2ebf0f5a8130.exe.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 107KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE