Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d3eda14a4f7b502a87481727c7067650.exe
Resource
win7-20230831-en
General
-
Target
NEAS.d3eda14a4f7b502a87481727c7067650.exe
-
Size
65KB
-
MD5
d3eda14a4f7b502a87481727c7067650
-
SHA1
84e44f86db80e69acf60ea3e00269d726efda05a
-
SHA256
1d58128620b686731edc5b16a4cf24a27002e0cbe0dd1ff3bbcbec059ecafbf6
-
SHA512
56607c06b21870225ae85109c1a99b464d90755eb56d09ff600ce2ae8c8c70234c0f9ca3640dcf8528d6047fd6a9dc636d83de97fa345841f6bbdd3c005d1d08
-
SSDEEP
1536:CbdBrir3aJa+WlEihsvZajnZxw9gmW6iBdCYqAdiMRrRB1o9F6K:CbyusNl0vZajzwbW6WlBGXF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d3eda14a4f7b502a87481727c7067650.exe
Files
-
NEAS.d3eda14a4f7b502a87481727c7067650.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE