Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7f0ce5488e0956c5b9a7a91b04fed8e0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.7f0ce5488e0956c5b9a7a91b04fed8e0.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.7f0ce5488e0956c5b9a7a91b04fed8e0.exe
-
Size
20KB
-
MD5
7f0ce5488e0956c5b9a7a91b04fed8e0
-
SHA1
100469c7d4a7817df55d403e5943db53f051d95b
-
SHA256
f4d5674a2786556af0a22632f9c66beac0f2d5767ba4ca2203d60d6685d726bb
-
SHA512
ca1353e907018cf88a489ded697274e418ffcb0541e6bc5987622270f81b7aa8fc5a0f1d90ce68eaf17c8e1e70a5853325349649f75b46313e5b2a01fc0e6a02
-
SSDEEP
192:0id86dnQ1HHtqzGDnrRNtmblNW6+rG15xvhwOwIn17mXOFtJkVCtG9NOPoRsno3Q:0l6d+tqqDRhG15xvnxWOFwt9NO9qok0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.7f0ce5488e0956c5b9a7a91b04fed8e0.exe
Files
-
NEAS.7f0ce5488e0956c5b9a7a91b04fed8e0.exe.exe windows:4 windows x86
8b952403cd7980f20cd10a1500bc5902
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgOpenStorage
CoInitialize
kernel32
RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess
advapi32
CredFree
dhcpcsvc
DhcpDeRegisterParamChange
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ