Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2786282f255cb0b451e96a99b5354fc0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.2786282f255cb0b451e96a99b5354fc0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.2786282f255cb0b451e96a99b5354fc0.exe
-
Size
228KB
-
MD5
2786282f255cb0b451e96a99b5354fc0
-
SHA1
1c8e1b9b5222907a7d17a3c08add1570dc2c9d86
-
SHA256
4f584405a557d42d8f9af940f3f41e13d69d9d37440fca9096cd864088d0ada8
-
SHA512
e75f5538d4f71bf0d0127ef073fbbf1d9837fd7dbd3afe1990a4c6e3eb77d1d9b390ed378df63d4b70115d7b48df12ae69110c94a01c6ccc7ad0174e91d08cda
-
SSDEEP
3072:/LQaL9tbLkRIgd1Lye9yjE2hWAN5XbxlUKL+LOftpLthEXOpvT6sa:TlZtbLWIgd1LZ9oECZbxlUS+LOzEXKVa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.2786282f255cb0b451e96a99b5354fc0.exe
Files
-
NEAS.2786282f255cb0b451e96a99b5354fc0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ