Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e2653bbb07761535daa0e177c3dd7eb0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.e2653bbb07761535daa0e177c3dd7eb0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.e2653bbb07761535daa0e177c3dd7eb0.exe
-
Size
13KB
-
MD5
e2653bbb07761535daa0e177c3dd7eb0
-
SHA1
2df2aeb918bcf46e3185e18db81bb8a903cd94a1
-
SHA256
a1e1a6a15523709a39dc8ba74493627de89f2657ec31a2641dff0634344977cb
-
SHA512
2298fde47f6c8e28e738216b8dd2f705cd70455db8d2aab7295ec17b5a142befd0356d1d2693cfafd5b5895e7562b7569eae47a45670dbc9916e1fa0e3ca2667
-
SSDEEP
192:Hh3sVNS9ziCmxMrRF+HK0VHh1MUXHNvBrFMWePi:B3sVNS/eHq0VHh1MUXHfKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e2653bbb07761535daa0e177c3dd7eb0.exe
Files
-
NEAS.e2653bbb07761535daa0e177c3dd7eb0.exe.exe windows:4 windows x86
347bba216d283710d8891c1d5e2fecd1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
lstrcpyA
HeapAlloc
SetFileAttributesA
GetLastError
lstrcatA
lstrlenA
GetModuleFileNameA
GetVersion
Sleep
GetStartupInfoA
CopyFileA
CloseHandle
GetModuleHandleA
CreateProcessA
HeapFree
user32
wsprintfA
MessageBoxA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
msvcrt40
__p__commode
_XcptFilter
exit
__p__acmdln
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
setlocale
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE