Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f69d9580a6a830eaf55361eb71151250.exe
Resource
win7-20231020-en
General
-
Target
NEAS.f69d9580a6a830eaf55361eb71151250.exe
-
Size
2.0MB
-
MD5
f69d9580a6a830eaf55361eb71151250
-
SHA1
4ddaeba9f5690349b55e160224ed8bc249e5c14a
-
SHA256
4170a2a1fce7677b977c4f7c667a7c907c5860284e93ca1317d47a695b34f527
-
SHA512
9ad86dd762e44d5aedb3eb99e5d5301e198a905f1ca7f76d27cf6c6eca4f990d0077a9965e9002707a6419a1eeaa13adbb56d88aec5964910b04bb69c9033fb8
-
SSDEEP
49152:xroHM1LV+hA4Y1bw3XEER4gihqkYkeXJn:x3WAYXNR1ceX1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f69d9580a6a830eaf55361eb71151250.exe
Files
-
NEAS.f69d9580a6a830eaf55361eb71151250.exe.exe windows:4 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 681KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 766KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gexddoop Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shqxvafw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE