Static task
static1
Behavioral task
behavioral1
Sample
NEAS.803c3e812340ea0b668be608e2213260.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.803c3e812340ea0b668be608e2213260.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.803c3e812340ea0b668be608e2213260.exe
-
Size
496KB
-
MD5
803c3e812340ea0b668be608e2213260
-
SHA1
82076b6e67e03330d52995ad8cfe126faffe3afa
-
SHA256
1c4fdbe557a00d2e57b29562a4bfd70d89a5900bcf337f26c107db9f78351554
-
SHA512
6f689c41e059b4e384651a83b0d6877ccd1a71d27da7cc3ba112ae0d8ee2b52b91e1699e8019b900f1a5ed91cd6d77a8c536f42280e8238c8a33d30598633982
-
SSDEEP
12288:IjiMo7us39MQ4UWw4IS40c0fS0pyv/sZBQRbJ1n1DDUo:IjiMkuEozwNTYAESn1DDH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.803c3e812340ea0b668be608e2213260.exe
Files
-
NEAS.803c3e812340ea0b668be608e2213260.exe.exe windows:4 windows x86
589d48ed984f9485ea294725b3e3f1f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
RegFlushKey
oleaut32
SafeArrayCreate
Sections
.MPRESS1 Size: 282KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE