Static task
static1
Behavioral task
behavioral1
Sample
NEAS.527849d87b4171437f13bc15f73564a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.527849d87b4171437f13bc15f73564a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.527849d87b4171437f13bc15f73564a0.exe
-
Size
202KB
-
MD5
527849d87b4171437f13bc15f73564a0
-
SHA1
d1d94206dde41761eae24c44a09367edcee0977d
-
SHA256
8d795ab9f6586ac5a142880e84825f101b8c6b2fd62e1fe42dc84e31cd11c599
-
SHA512
6122732488c67a2937e672d166f47cb3ca1f76f5a175dab9e80eddc7f914c43d31b8ca6e02a3d274a5667cdf3ee075b1d0f9384009637c3fc5f2788dd5ba4d60
-
SSDEEP
3072:rI/dTjG9aHC1cJGluEM8U7yQiOIZkp21v54qvV0vX6iZ:ZTLvWyZkgzV8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.527849d87b4171437f13bc15f73564a0.exe
Files
-
NEAS.527849d87b4171437f13bc15f73564a0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ