Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEAS4953d32014d6f6a9014c95fb8092c9c0exe.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.NEAS4953d32014d6f6a9014c95fb8092c9c0exe.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.NEAS4953d32014d6f6a9014c95fb8092c9c0exe.exe
-
Size
211KB
-
MD5
4953d32014d6f6a9014c95fb8092c9c0
-
SHA1
9f56f4296cf3a88695d15502146bc27b9b482120
-
SHA256
cc7126bc985d71a027c1e9667b34167dbb9fc80d43d52a49854f85d9ddecb10f
-
SHA512
ac4b7e07b72fcbb7c54983977f92a2f6d31824841ed5b2ac523381e59188e1cb39a75d76205af52ad832168c1449b922ad1d038e4c1c3ec8eb2f5d9f68a7a00c
-
SSDEEP
3072:oljpNYz0/Cs0Mja+GRREy0LkG5ZfvWY7IVq9Stj4/7w7HI5/U5+yq1b0dM9J5YNi:oljUjs0/VREDwG5ZpUsX87HStbD9DYNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.NEAS4953d32014d6f6a9014c95fb8092c9c0exe.exe
Files
-
NEAS.NEAS4953d32014d6f6a9014c95fb8092c9c0exe.exe.exe windows:4 windows x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 204KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE