Static task
static1
Behavioral task
behavioral1
Sample
NEAS.424efcff0bf0b34fe7813bb5b6353090.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.424efcff0bf0b34fe7813bb5b6353090.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.424efcff0bf0b34fe7813bb5b6353090.exe
-
Size
10KB
-
MD5
424efcff0bf0b34fe7813bb5b6353090
-
SHA1
3aed6415c8e091fe3e5d60be476cd0a383fc301e
-
SHA256
061d384d1cf76af617ff4d641f5a6baae9043ab4e30e9d70ede60dd6982eb8db
-
SHA512
51c926bdfb705801badcbfa4763a8c25f0c41ef92e4726c0307e2ee08fadff1d6412cde7dd1320baaaa0c173c11b7d0355bbedd6eb9ad9a2c50a332e0a6184d7
-
SSDEEP
192:QVMLw+8oPHkjZipoZWMAQp41lRrg+jgC7zMjimJIM:QWL8ocA9ap41lRz7zUXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.424efcff0bf0b34fe7813bb5b6353090.exe
Files
-
NEAS.424efcff0bf0b34fe7813bb5b6353090.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE