Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1affe69836ffc00b0705dbd150649730.exe
Resource
win7-20231020-en
General
-
Target
NEAS.1affe69836ffc00b0705dbd150649730.exe
-
Size
360KB
-
MD5
1affe69836ffc00b0705dbd150649730
-
SHA1
fdb4df057c7b29f72afb120659368fd989fdf1ea
-
SHA256
c908943fe119944be98d19cfc4f539465c6be143fc9e2adef427f6c6067ddf40
-
SHA512
c51dd58686b34f08058ac74aae14755bbea1f2dfc945151daa2f8060260c2dba1de63e25c9761215962fd7e5284b9b1cad373f88642a8fab780eefd3dac092ed
-
SSDEEP
6144:ITF5ybIMlTAcy6yqvm15tPzdwozMO6ioTMVHw:iIbIkscy6MFZw6MO9ia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1affe69836ffc00b0705dbd150649730.exe
Files
-
NEAS.1affe69836ffc00b0705dbd150649730.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 256KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE