Static task
static1
Behavioral task
behavioral1
Sample
NEAS.9fb38505d596ccbcc9bc57f546b507a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.9fb38505d596ccbcc9bc57f546b507a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.9fb38505d596ccbcc9bc57f546b507a0.exe
-
Size
41KB
-
MD5
9fb38505d596ccbcc9bc57f546b507a0
-
SHA1
2b1b627d4668c69cc276b42e7604e05fff572d6c
-
SHA256
c4765358dbe0ec8f2285285fbf096fa3847e709f333bf4379ec9f72c5d406533
-
SHA512
e3ce37e727d5efc59a39f48ef3eb0b8129d26216d40e932ba5777fba16a53ab3559a76e7a4f07703f895ecc11a0c1f234d6e1c2257a8bf1d3840f10c1c760e59
-
SSDEEP
768:bywoFJK/O9qcjYVD7sxJ7QzaXP1MjNPIT:by3FJJ0cjazafOBgT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.9fb38505d596ccbcc9bc57f546b507a0.exe
Files
-
NEAS.9fb38505d596ccbcc9bc57f546b507a0.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ