Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1350e7f94c4cd0db9c6e410f91721590.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.1350e7f94c4cd0db9c6e410f91721590.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.1350e7f94c4cd0db9c6e410f91721590.exe
-
Size
1.5MB
-
MD5
1350e7f94c4cd0db9c6e410f91721590
-
SHA1
8bb5c35f8e69b11af5d7e45215d0947cccb449fa
-
SHA256
96f440f58f55d9efdf0644a0fa8bba3927d57e94b1e618d7ef47793b106e2d0b
-
SHA512
b92dabc745dff96e7a5ae8bb3c14417427159e01ff4cb6d5ffe274725cc62ae9389715508398a1e3689f04161b93c87e46161257c067bba8e474b8c92d32096a
-
SSDEEP
3072:9l/Oe4gtjY/Bt4zx6Y6FvPfHOyTMzvGzJdIPD1AhYsUxDb25fg9pWZ/KqmGQ7Ejj:9lH4gteo6Y6dH/Mz3nsAO9jl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1350e7f94c4cd0db9c6e410f91721590.exe
Files
-
NEAS.1350e7f94c4cd0db9c6e410f91721590.exe.exe windows:4 windows x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 204KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE