Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ProformaInvoiceWellErgon16092023.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.ProformaInvoiceWellErgon16092023.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.ProformaInvoiceWellErgon16092023.exe
-
Size
1.1MB
-
MD5
25e14638ee6c5b04008b3b50b99f576f
-
SHA1
5ee0d64b3f79aaa8cd62aa05d99cacc812a15452
-
SHA256
b78001c65caffc4ff2cf300a7b2c2924a00720b34a38e5d021d115dfa419cbd5
-
SHA512
758479ad8368d7023c683e845f0fdccb8425867b53cd13050319d30608172ce09fdeee74008960df6b797090d5ee7e8b21460cb11e108e27638cdb9e51bf9727
-
SSDEEP
12288:37dBa/mFiTEJ0+0OR8FCko7VOkILM/PgyiZc410j8y6Q6UTRPStxmVmiTPLR46qh:rbIHLG5iq4Ho6UTBStIwifR76Nt4J1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.ProformaInvoiceWellErgon16092023.exe
Files
-
NEAS.ProformaInvoiceWellErgon16092023.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 923KB - Virtual size: 923KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ