Static task
static1
Behavioral task
behavioral1
Sample
NEAS.50f30a4afeafe526c629175801931a30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.50f30a4afeafe526c629175801931a30.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.50f30a4afeafe526c629175801931a30.exe
-
Size
21KB
-
MD5
50f30a4afeafe526c629175801931a30
-
SHA1
8fa7456e7f4dbfdabb4bf76c70c95191b3f3eb19
-
SHA256
6f90ccd0db26eeb9fe85b2dd2bda47d58c4b6d21a1eba26a6830a740d87f2fe7
-
SHA512
7dc1d1f20a1663fd6d7070ae1f9e5e8e691e14d3191f7465100f9e57025ced71cb367831a926b9abea6d508d2cbb40e92812adf09673c04da5fd3d7ed52926ba
-
SSDEEP
384:smd9soKDat/c0rL3FyOfOqBoj4FRz0wRHwAShi:z2o7t/zf6WJ+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.50f30a4afeafe526c629175801931a30.exe
Files
-
NEAS.50f30a4afeafe526c629175801931a30.exe.exe windows:4 windows x86
0c8bccc9e77b540df5fadcbe963cbaeb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputA
CreateFileA
Sleep
GetStdHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ