Static task
static1
Behavioral task
behavioral1
Sample
NEAS.f3e16b163c9b8c2db20cd06c9ac27ef0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f3e16b163c9b8c2db20cd06c9ac27ef0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.f3e16b163c9b8c2db20cd06c9ac27ef0.exe
-
Size
7KB
-
MD5
f3e16b163c9b8c2db20cd06c9ac27ef0
-
SHA1
2995e32ca7e44589a4abf52afde52915ba793d16
-
SHA256
380206727bba864e252bc47ccaa7f59de2dfeb177fb3a3dd892045c698fcf9fd
-
SHA512
a352f3ecbea61345ace6cf505a2b0e2d25fbe84d0951c493de06db5a779e556bd1e9367adbd947c500af9a192df7971be5b7d52def3c584cb5c0ee7ed5b5d4fe
-
SSDEEP
96:1XaKSzYh1ml91g6nzzB0mVW092072LeFFH+HoKBqk:eYhU/g6nzzB01o284e3HUYk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f3e16b163c9b8c2db20cd06c9ac27ef0.exe
Files
-
NEAS.f3e16b163c9b8c2db20cd06c9ac27ef0.exe.exe windows:4 windows x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 3KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE