Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f3cdd38d1e84971745b76b75e68a3360.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f3cdd38d1e84971745b76b75e68a3360.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.f3cdd38d1e84971745b76b75e68a3360.exe
-
Size
173KB
-
MD5
f3cdd38d1e84971745b76b75e68a3360
-
SHA1
80151f6bee1da3fdc5e3aabaee9c08966dcd5acc
-
SHA256
7511c2923f30c46de7f5d9c1050d5bffad223098289688ae1bc0979e5d4a08b2
-
SHA512
abbf99e08feff50baccf5670a3dbbfc987c141f5b0a0789f10cea3af25a7ac42de0e47dad6bc8cbc52dfb99c9ab1d6a313a9dbbaf042c5b2eca6596d2e210a8c
-
SSDEEP
3072:+aUuhHrjOT+vmqWjPs4Ekcw4e84S7dG0RyVMy6A9RFdl2roVNLjpgarXP86:+aFr6YmqW7fIFdnRyVJlNRVXj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f3cdd38d1e84971745b76b75e68a3360.exe
Files
-
NEAS.f3cdd38d1e84971745b76b75e68a3360.exe.exe windows:4 windows x86
70ac620c5c4e3a37c16add842c6c0582
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadAcceleratorsW
gdi32
DeleteObject
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
.text Size: 167KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE