Static task
static1
Behavioral task
behavioral1
Sample
NEAS.65aa2029256a4f877e25acdca2eded10.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.65aa2029256a4f877e25acdca2eded10.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.65aa2029256a4f877e25acdca2eded10.exe
-
Size
2.7MB
-
MD5
65aa2029256a4f877e25acdca2eded10
-
SHA1
6b4eaea8457f4182d01fe8d9cd76cff6c86f2076
-
SHA256
01a0cd8843d32dc4e12653685d2ba9af8165a5a5d71e87378291385d8dc99d00
-
SHA512
4ccd773aecdf3dc9bafa60653c6e07ea331ee9323f6c41672ae597f39b5c996a67402cb87141ced2c2c306624db79914419aac180633ff30ea35220ffef20b1e
-
SSDEEP
49152:5G0rWiknUtLqMjjDXE7KKmJcyKNsK6ZBy+BcGTi5lBB8O+u7EiM/QL7:5VSikUtL5nuqjhK3+BcgelgOhgir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.65aa2029256a4f877e25acdca2eded10.exe
Files
-
NEAS.65aa2029256a4f877e25acdca2eded10.exe.exe windows:5 windows x86
5a498eee87e4d89512a84502f500181f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 1.8MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 892KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE