Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3967a9832e29594859dadc2e80208fd0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3967a9832e29594859dadc2e80208fd0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3967a9832e29594859dadc2e80208fd0.exe
-
Size
784KB
-
MD5
3967a9832e29594859dadc2e80208fd0
-
SHA1
c0eac6eeaad4edf66b58f229abead340e75a8331
-
SHA256
2dd208fdbb38f96b455b66e5964216132160371e98f37d07396e65930e8ceccb
-
SHA512
ced403b41a9d84c5980a8530f019a7f93545df195fc164f474215771d5079b390532d701e900a057bd2e3a910f370f248f406f08fa65c8b6b92d227333867869
-
SSDEEP
12288:zJMxy+7S7p8yuL4RuKEpKp1w+xEIpUm6CIsh1L0gp0hD0I9VyitBO:z2wTeLOT6Krw+2KeCI+1L0geKI7yYI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3967a9832e29594859dadc2e80208fd0.exe
Files
-
NEAS.3967a9832e29594859dadc2e80208fd0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ