Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c378b6fe9a76fab014b43fff21702dc0.exe
Resource
win7-20230831-en
General
-
Target
NEAS.c378b6fe9a76fab014b43fff21702dc0.exe
-
Size
276KB
-
MD5
c378b6fe9a76fab014b43fff21702dc0
-
SHA1
c82bb4c3c917ba71468d94b9ae95940f7115556c
-
SHA256
33f1e4f5acab8bbc3b4a564887812444759172cf5a9ab4300500f935a30efb85
-
SHA512
77c28858c5071e893deebe00319f05a31e0db6094c252f3c1ff164c6921b04ca176ec7391c09d24f0a47a4a22be248ba9f80993da7d91dc223880af90c4723e4
-
SSDEEP
3072:ThOm2sI93UufdC67cipfmCiiiXAQ5lpBoGYwNNhu0CzhKPr:Tcm7ImGddXlWrXF5lpKGYV0wh6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.c378b6fe9a76fab014b43fff21702dc0.exe
Files
-
NEAS.c378b6fe9a76fab014b43fff21702dc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ