Static task
static1
Behavioral task
behavioral1
Sample
NEAS.eb1110a62c6eb972d34a0943f18ab4a0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.eb1110a62c6eb972d34a0943f18ab4a0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.eb1110a62c6eb972d34a0943f18ab4a0.exe
-
Size
800KB
-
MD5
eb1110a62c6eb972d34a0943f18ab4a0
-
SHA1
c820c8f98bc5d9cb7587237e316d923f88b9241b
-
SHA256
73f3fa247148c10ad72ac4176d6ad199c67ce0c7a6d9143baf6446ce1fcb26a7
-
SHA512
79cd6231ce0ce9424f70464670d38478e33022633f939dd8d8bb922371b2a0325279660cb4bdbce42ba269927e446d8bbd1c648b7222f9ebdd98b7e582cf3bf1
-
SSDEEP
12288:w2LkDvCweYGjEaXKlAHwKQa337kzdxWkZM5DiOTtP032ot942oXVgJiNAVuRfnoZ:KTCwDGt6aHwJuJLFgJjsfaXbou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.eb1110a62c6eb972d34a0943f18ab4a0.exe
Files
-
NEAS.eb1110a62c6eb972d34a0943f18ab4a0.exe.exe windows:4 windows x86
de6185b8cdae1e84cb8f9add0b5f8afc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 327KB - Virtual size: 570KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 8KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 45KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE