Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b51ec77224540510e94dedf81632ffe0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b51ec77224540510e94dedf81632ffe0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.b51ec77224540510e94dedf81632ffe0.exe
-
Size
21KB
-
MD5
b51ec77224540510e94dedf81632ffe0
-
SHA1
832a1de8a515a04f9a92648f8a1a6a5c8b8f96c2
-
SHA256
c399e5297db0989b8695f69398b37b59608e1380e151b0fcf46c088a9f390022
-
SHA512
370ff525b7ad16fd2db01f1028fdc96d2da0a55cf6f76d2d3010175004bedeeaf496b4223d651596d8d69ac9d0ea39167d6f5a78a0c6289f3fde7a07102b0849
-
SSDEEP
384:jIz4yRakFXfEln49mxSZHrXnKf98BLVa5L0vMtFob1OKrBGgVumFIP4pQ:jIUylXfKc4EHrXI98BA0v2a5YgVuEIP1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b51ec77224540510e94dedf81632ffe0.exe
Files
-
NEAS.b51ec77224540510e94dedf81632ffe0.exe.exe windows:4 windows x86
0c144496adf6d6951a8195019d714846
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
Sections
.text Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE