Static task
static1
Behavioral task
behavioral1
Sample
NEAS.326e609b54c41c4c1f7b357402b41ea0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.326e609b54c41c4c1f7b357402b41ea0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.326e609b54c41c4c1f7b357402b41ea0.exe
-
Size
588KB
-
MD5
326e609b54c41c4c1f7b357402b41ea0
-
SHA1
329ba9256241a46ee2eb06f92b3b7dd86caae5e3
-
SHA256
7be3906a77ffbab4c086ebc3a2cad2c93d98d58ef278f633dd03aac21b9f012f
-
SHA512
97bfed92aea73b6489de3cbeeb88990970f4afabb65ba268ea2b67ad23a89869d58261971d12b38c529254a09c08c1c4bbaedfd0fac8773ce57990c8564d4a5a
-
SSDEEP
12288:khUGS8zztoXGRbPLZy0l4SGGvGGvGGvGGpx:uTxoWRbPLgXSGGvGGvGGvGGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.326e609b54c41c4c1f7b357402b41ea0.exe
Files
-
NEAS.326e609b54c41c4c1f7b357402b41ea0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE