Static task
static1
Behavioral task
behavioral1
Sample
NEAS.04c3ceebac1a332e636d7ccac2cb0c20.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.04c3ceebac1a332e636d7ccac2cb0c20.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.04c3ceebac1a332e636d7ccac2cb0c20.exe
-
Size
56KB
-
MD5
04c3ceebac1a332e636d7ccac2cb0c20
-
SHA1
2a88ed606c21a1502a7081e3d996c83ebc5b911b
-
SHA256
d486ea38a27399ef91f99f9a0e843e320e873ae7d1ed27ffa17ba663e07d3c02
-
SHA512
59382f132c0907d9996aba1433153ee30caef00a54715d227a419d36d774ca0f3bf65d9f84b81cf0788e7d62105ea9eae530faa2dfd7bca0f8321eb121bc98ae
-
SSDEEP
384:TJtKVSWLYcR2IvBd2RmbEVtXXp02dsKCgdIY0f3AZgdj:T6XLYcR2GDV6t2app6rRdj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.04c3ceebac1a332e636d7ccac2cb0c20.exe
Files
-
NEAS.04c3ceebac1a332e636d7ccac2cb0c20.exe.exe windows:4 windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: - Virtual size: 350KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE