Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8301dd6bc8e5479a172ac94c2f51e860.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8301dd6bc8e5479a172ac94c2f51e860.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8301dd6bc8e5479a172ac94c2f51e860.exe
-
Size
130KB
-
MD5
8301dd6bc8e5479a172ac94c2f51e860
-
SHA1
aada0899099ba1c7e01116c153d96b8db0d76e27
-
SHA256
f3926acc18503db115f6c35a7a762890cae036220c44c9b8e9eca2f44858a83d
-
SHA512
5ed694176078600f7b9ef9c0813c706cbe1e8151df928a32620b35648360b9e9622a910aba7db4411d0fff30e3001900e1d9fa062406389847eea0c4a1a8b1fe
-
SSDEEP
1536:xwJAw8P1JH+bZSnQUAwQbgL4O1tyVBtcN9Lh/VJRCJwVOK3tnbqBDldHazJeLnfW:xiGJH+nUAwQ8/vJP1aB9awL3ubUl8Ws
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.8301dd6bc8e5479a172ac94c2f51e860.exe
Files
-
NEAS.8301dd6bc8e5479a172ac94c2f51e860.exe.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 124KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE