Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ff89da5bf75ab1d557ba98fb826351a0.exe
Resource
win7-20231020-en
General
-
Target
NEAS.ff89da5bf75ab1d557ba98fb826351a0.exe
-
Size
65KB
-
MD5
ff89da5bf75ab1d557ba98fb826351a0
-
SHA1
b5b6f1ef5f2e2bc6009523006b81f2b13120c11f
-
SHA256
e6f496249e044a432a3291a00a7291fa692454f7dd5850bdf16a2336432cd987
-
SHA512
b0dea8549d3324750ec43d4bcdab8c23c32e984a5a3911ba191f5babb0db0461e13c84a2fedb396362cc9b32677e1fe3e905d2d5813f728fecca0db05e16c183
-
SSDEEP
1536:g/hDZoysNDmfm3sZeSwLROOY4vrbazr/U9h8SXVXa9iD:g/hDG9N+BZRKOOY4TbaH/shtXVXaED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ff89da5bf75ab1d557ba98fb826351a0.exe
Files
-
NEAS.ff89da5bf75ab1d557ba98fb826351a0.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE