Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2845742e2ef1ca6f6d5107184d6e7610.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.2845742e2ef1ca6f6d5107184d6e7610.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.2845742e2ef1ca6f6d5107184d6e7610.exe
-
Size
14KB
-
MD5
2845742e2ef1ca6f6d5107184d6e7610
-
SHA1
f69fbd4982c8d96a5c61b0136056667988eaab59
-
SHA256
85ee9ad822aa1d8210eb4c05e677f2eb361aeea1ede3e8cddf211e2b348849cd
-
SHA512
12da1124baf4c1604cfe2bcd392c88e8a48fcf1cdf282219e3cd9f940c87000c11c5581704424f51e2ffd58f58d455267e8082f993092eca11fc728c721f1301
-
SSDEEP
192:/wkP5hOCtMIRwwwwwwwwwwwwwwWjwYQoGICka8kNr2TSOqDE045HQcttt:vhFtxQjZ/m8er+0DE045H3ttt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2845742e2ef1ca6f6d5107184d6e7610.exe
Files
-
NEAS.2845742e2ef1ca6f6d5107184d6e7610.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ