Static task
static1
Behavioral task
behavioral1
Sample
NEAS.643a59439e16a5e63ff1027d217972f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.643a59439e16a5e63ff1027d217972f0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.643a59439e16a5e63ff1027d217972f0.exe
-
Size
4.2MB
-
MD5
643a59439e16a5e63ff1027d217972f0
-
SHA1
43f035a090489ad2a73d660ef71de097311e0398
-
SHA256
73154e82303ee2eedba42071036d48be07ad6c68ed0105f21e17fe1ebef52cdc
-
SHA512
e9d837977a35de1c926351d5157359da5af0bb0f8f125c1ac413df7a0c91c2d5f1b72288344e0b99a09f0e69b311798766351b0a3333bbb011920e1b97379fd1
-
SSDEEP
49152:xNjtu2UfSUfrZVjae/IqdDFIJX3iGDEfpYITqDEfpYIGEDEfpYIZeHeAHb4ZdXa0:xfuYIJZ23iYEeREeYEeLHeKKddOiFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.643a59439e16a5e63ff1027d217972f0.exe
Files
-
NEAS.643a59439e16a5e63ff1027d217972f0.exe.exe windows:4 windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vhx869cl Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 476KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjg6vz9r Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o2yxs7tj Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agqc60bn Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a7ioullk Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE