Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b21cdf4da1b617e964a0ab29947cb200.exe
Resource
win7-20231025-en
General
-
Target
NEAS.b21cdf4da1b617e964a0ab29947cb200.exe
-
Size
284KB
-
MD5
b21cdf4da1b617e964a0ab29947cb200
-
SHA1
733f72141a71e9859c98d8d6e87f5352606ef3c1
-
SHA256
1e733b988efefd11fbae9b91fd40a38f4d5803f6035f531fd01c356dd6e45262
-
SHA512
749631971732ac0f60dde629570e35c385d4213ef2bdcb44aae0a22586a1c86bf514e44367fb70383eb6a0723b8c06bd8d3884228776d2a0407d9a8aa593ef66
-
SSDEEP
6144:96xwSR5NtUIJEWyXuew+q1l0d2Js6H5/TZkK8:9A3NtUISdPw+Elq2Jsm2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b21cdf4da1b617e964a0ab29947cb200.exe
Files
-
NEAS.b21cdf4da1b617e964a0ab29947cb200.exe.exe windows:4 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE