Static task
static1
Behavioral task
behavioral1
Sample
NEAS.351e5497af92cd5aa9915814b2ce9170.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.351e5497af92cd5aa9915814b2ce9170.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.351e5497af92cd5aa9915814b2ce9170.exe
-
Size
14KB
-
MD5
351e5497af92cd5aa9915814b2ce9170
-
SHA1
1b496721887a35babc93254ace2cb9a90182eddb
-
SHA256
8451ea642c427527767591fc02c2bfcc349013f2c51675493a27e491310fda52
-
SHA512
0cd5272a88cbd12f3dd7a6283fd323ee24a33f6164f395f12273f7d7c38df5a6d43acca7dd474cd0b98da5fa57e6699dacc8c5ce077e38f291085d8561006ee6
-
SSDEEP
384:FAsL2dF0ixPNtCkmCuuuuuuuuuuuux3ZBzDpknDE045Hd++++:FAsLp6P+kmY1pkDAL++++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.351e5497af92cd5aa9915814b2ce9170.exe
Files
-
NEAS.351e5497af92cd5aa9915814b2ce9170.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ