Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6d697923e8461816103c29252ec61150.exe
Resource
win7-20231023-en
General
-
Target
NEAS.6d697923e8461816103c29252ec61150.exe
-
Size
192KB
-
MD5
6d697923e8461816103c29252ec61150
-
SHA1
40c4d1c755bef9313c8e8c16aad9f3087375771d
-
SHA256
28a143e5f46744ae6aca2eb2cc1969bbf2636dc967ec28f67d26df049ecda549
-
SHA512
d7702e2027721e969fbf3644e6dca238c095ae960259365af4fd0e9efbe246347117f5da52f5fb89be7b8f16777d1cb60f664afcea8e3ea4bff4d03ceecd4636
-
SSDEEP
3072:DWTeUSUf5NgokdbfvrXzEFtD2rQogicqwmln8By8aQirYOFQrjY1NHPy2KJ:ymUzarrXEtDKQoBfl8srQiYaQry5FA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.6d697923e8461816103c29252ec61150.exe
Files
-
NEAS.6d697923e8461816103c29252ec61150.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 161KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE