Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9a5fa5be0381e368c35305b38ffa8d60.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.9a5fa5be0381e368c35305b38ffa8d60.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.9a5fa5be0381e368c35305b38ffa8d60.exe
-
Size
131KB
-
MD5
9a5fa5be0381e368c35305b38ffa8d60
-
SHA1
38289d4688d5908e8c9065da3908c91bf2f9ab27
-
SHA256
d9eff80afe200e20c68fb0695a24b3133a66e66cd88736b32165be705a872876
-
SHA512
b10958cea51ef87ab70e30ade4a8487f2b56f942d33aa820ba94739c0a10d94dac57a4869f9fe3bfe077a87ecb9deda730835f319844b5f2f52ad9a198867abb
-
SSDEEP
3072:+2pcrh7M55zT4PFPeJG3uKbUKHpRe8vzPVZwxoex8KCHWEmC5:tcV7QGFPeJGHbUWgKwxBFw1m+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9a5fa5be0381e368c35305b38ffa8d60.exe
Files
-
NEAS.9a5fa5be0381e368c35305b38ffa8d60.exe.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 123KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE