Static task
static1
Behavioral task
behavioral1
Sample
NEAS.92b6a64cd7be68541fc13e3c4e683b4a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.92b6a64cd7be68541fc13e3c4e683b4a.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.92b6a64cd7be68541fc13e3c4e683b4a.exe
-
Size
54KB
-
MD5
92b6a64cd7be68541fc13e3c4e683b4a
-
SHA1
3004db2578f75d88af706969e931310ed31dba03
-
SHA256
22757c5199ccb500c9054b1809474c45f6b485597f5da45dccd2e3e298a629c5
-
SHA512
7dfff164088c6d764a656cd24346a8942c4214c579ea1ca43f54eccf6851c2c2c80b791307748326c3d353628fe91185fd93122a164b84b2facdbcfc1b011df3
-
SSDEEP
1536:l7TJopblB4dqyyUiZ06pX3I6/qxiSEGNJFV:l7TQlatyYePxiFV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.92b6a64cd7be68541fc13e3c4e683b4a.exe
Files
-
NEAS.92b6a64cd7be68541fc13e3c4e683b4a.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.rsrc Size: 39KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE