Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5d7c0ac6e50eb97c0d0a2e798887bee0.exe
Resource
win7-20231023-en
General
-
Target
NEAS.5d7c0ac6e50eb97c0d0a2e798887bee0.exe
-
Size
65KB
-
MD5
5d7c0ac6e50eb97c0d0a2e798887bee0
-
SHA1
0c218160190748efd70307c931b0d4d1ac7f1739
-
SHA256
b011012d08614474d7fda3a4d8d4f646fe30dfadf1d91a5d236dfb70af4308b2
-
SHA512
06982cf1de2461265972a478d54d703ce78887b8f323f3e10e64ee1b7d1d823878b3ea8d6eedea96e9d60ac362d904399456afc5eeb3c2487cc4e0ac12da0909
-
SSDEEP
1536:43c4hHFB7ONNvJZOqJ9NiwUl54yrhC0gJbWD3A6Q+9M6pByxzbTaQoueG:0cgBKNNvjLJnirl54yroJS9vBajaPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5d7c0ac6e50eb97c0d0a2e798887bee0.exe
Files
-
NEAS.5d7c0ac6e50eb97c0d0a2e798887bee0.exe.exe windows:4 windows x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE