Static task
static1
Behavioral task
behavioral1
Sample
NEAS.348207bac42f89d44c7aea3873258270.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.348207bac42f89d44c7aea3873258270.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.348207bac42f89d44c7aea3873258270.exe
-
Size
14KB
-
MD5
348207bac42f89d44c7aea3873258270
-
SHA1
97f8e52fa2f0318e0780922e30a3fc503264024e
-
SHA256
a991291742dd5e9c14c5a71c04b983d9accc1039dfb5f0b0832ef11cb25cd552
-
SHA512
60970aa7b23c742083474405e77db386f10dd37048a87d12386edc9e008d5ba901bd26dfc61f04e4a42adb262ca1c8890db1335da7393404af0d2e5785b440ad
-
SSDEEP
384:bmt+Zib/cLYn5s/A0Oh17KC6lcY6FDE045H:atCdAhWC9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.348207bac42f89d44c7aea3873258270.exe
Files
-
NEAS.348207bac42f89d44c7aea3873258270.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ