Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3a2e5837830dc5e00bd62edc721a1c60.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.3a2e5837830dc5e00bd62edc721a1c60.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.3a2e5837830dc5e00bd62edc721a1c60.exe
-
Size
119KB
-
MD5
3a2e5837830dc5e00bd62edc721a1c60
-
SHA1
a6463024a77eb64dc5dc419bbf8d8e3453d14735
-
SHA256
ce861ef24064e89e05cf0c2bb4d02d5723c0f3dc8cda02164789ff9a7d2116f7
-
SHA512
fa0c5edc54108a4139f9e7fec574b3ba3f52e22d9e8befe26078b4675df19fb00bfabae9469726a892ba5140198596544f71316021ed228c86da452a15ee0142
-
SSDEEP
3072:ve0NrHtphYmMbdis5I5BDzWsIes8RAV875hx/y9:PrNphYX5cDzlRAm7xy9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3a2e5837830dc5e00bd62edc721a1c60.exe
Files
-
NEAS.3a2e5837830dc5e00bd62edc721a1c60.exe.exe windows:4 windows x86
17bc76d3106b0b5c2fc3b94faf5fcf5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleInputExW
SetThreadpoolTimer
CompareStringEx
GetCalendarDateFormat
AddRefActCtx
RegQueryInfoKeyW
InterlockedIncrement
ReadFile
timeGetSystemTime
BaseReadAppCompatDataForProcessWorker
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE