Static task
static1
Behavioral task
behavioral1
Sample
NEAS.e16e833b788604cde42db41517706580.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.e16e833b788604cde42db41517706580.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.e16e833b788604cde42db41517706580.exe
-
Size
119KB
-
MD5
e16e833b788604cde42db41517706580
-
SHA1
f1b4db30343a7b4e16c3255895fa49199bb87a56
-
SHA256
c824788bcbec9b92de84b639bfb2adf9905235810c97fc0c490cd04adaf95e4b
-
SHA512
193b0b97642de6be63edfa574dccb649b9937862214418b74e33b04cf6c6c89a7b9d8abb580723a8d6c0fc2166a302e761c12a68ddd3c20613004e9818e39798
-
SSDEEP
1536:+9OCx0EiIVQmBvMnrDRJ1W9ENPQJLoLJb2lRpMP/UgxzMqyWBtjEX3nIHS+o2ab6:+zP+Ql6tWzIR6/mo9DA3qUA65EZAND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.e16e833b788604cde42db41517706580.exe
Files
-
NEAS.e16e833b788604cde42db41517706580.exe.exe windows:4 windows x86
1fd91ceebd9626091236c335bc41a14b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFirmwareEnvironmentVariableW
SetProcessPreferredUILanguages
SetConsoleScreenBufferSize
GetNLSVersionEx
DnsHostnameToComputerNameA
CmdBatNotification
UnmapViewOfFileEx
NlsCheckPolicy
QueryActCtxSettingsWWorker
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE