Static task
static1
Behavioral task
behavioral1
Sample
NEAS.31129571249c5f822d854b1ae86773f0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.31129571249c5f822d854b1ae86773f0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.31129571249c5f822d854b1ae86773f0.exe
-
Size
843KB
-
MD5
31129571249c5f822d854b1ae86773f0
-
SHA1
9d42c7add73bc7e58e5464edbfef4f37a0857966
-
SHA256
8227983165f907d09f774659f0cf5a69e2c94972e67b4cc01450e597e0a306fb
-
SHA512
e312531a6a5af508f2c681e3523baf45c8f6deccca52bcb58a6c194893033082a669dfa76f725a322ff28d2d506746bdbe2522e8230d2eb93a628dd7af572fb3
-
SSDEEP
12288:zJF2Tx0P2uymYNWdQ90N0vR0bSnQjG8dfY78BpdFFAyZ1bC0LzfTVoiiQW84RIQh:zzqxG2Z9mIhQvq8BjFyMXtiQW8ohEFq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.31129571249c5f822d854b1ae86773f0.exe
Files
-
NEAS.31129571249c5f822d854b1ae86773f0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ