Static task
static1
Behavioral task
behavioral1
Sample
NEAS.babe60e24a431202cab6e08878e28bc0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.babe60e24a431202cab6e08878e28bc0.exe
-
Size
97KB
-
MD5
babe60e24a431202cab6e08878e28bc0
-
SHA1
a29e37ce47b611083ad529040c7ca4be7eacb778
-
SHA256
e52c0b3958f0888487b6baf52105a6cdd5eb93fad1b3a4b28a3c1be7a64526ba
-
SHA512
26f4027a0ed2a87084a6ac37d30c5539f1d1127c502ec32ab5adc781d31934ceb04a7e9d889a90af0c829e58814ca05f1680eb2010f91c6b21c2b41edce062a1
-
SSDEEP
1536:p+ksIcE/QJn+lELCiE2j8E5q3/fxVJc7QLQfPk4TnvtK+NmkBx/DTAxfPYk:D3/Yv8Wqvpnc7/fc+n7Nfx/PInf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.babe60e24a431202cab6e08878e28bc0.exe
Files
-
NEAS.babe60e24a431202cab6e08878e28bc0.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE