Static task
static1
Behavioral task
behavioral1
Sample
NEAS.70902b11848b37c623b45c02765ce00c.exe
Resource
win7-20231023-en
General
-
Target
NEAS.70902b11848b37c623b45c02765ce00c.exe
-
Size
81KB
-
MD5
70902b11848b37c623b45c02765ce00c
-
SHA1
3dc325fa699319b15fd123cd56349defb4c92b54
-
SHA256
3bcb0383810b5ffb3d6e613022baffc6de55057abd0b71ebe300e9cd2333af46
-
SHA512
31dacc28d6ee183b3e4d61c873c513b501bd2252e5f5cdae4db7e965da7c252bd0bb76881b9df5350ab12e272d8545524fc1f8facc604a21fcabf017eea30d4d
-
SSDEEP
1536:eNHCDLiTEeX3rIyFCs3N8aLnfi6CaEVjfZfzoo7Y:e+uQeX7IGCsXfi6ZEVjfZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.70902b11848b37c623b45c02765ce00c.exe
Files
-
NEAS.70902b11848b37c623b45c02765ce00c.exe.exe windows:5 windows x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
sdfsdhff Size: - Virtual size: 164KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdfsdhff Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE