Static task
static1
Behavioral task
behavioral1
Sample
NEAS.293684bc8bf53b3da36476d8dd5b6550.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.293684bc8bf53b3da36476d8dd5b6550.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.293684bc8bf53b3da36476d8dd5b6550.exe
-
Size
3.9MB
-
MD5
293684bc8bf53b3da36476d8dd5b6550
-
SHA1
6aecc3d9b82fce8e06b5ed6de3a8c455bf33e1c4
-
SHA256
78ca79c01fb5d284e933b367e003b39299c94c4ad3164dcc830dec4a9b84d85f
-
SHA512
b2e6ac21d6fb1361cb85a101e6efdd5aa378747bfcb21f15268d0f1cac8fc77a64e5608c357c24b308f0a63550bac82d645f57aa8b5d60ae1e092a31e9f84840
-
SSDEEP
98304:fKi9pbgipfMWDVZXM1Hd3bbxCH4YZijT97CUdWmwC+tYV:TNgipfLpZ81dLVCYYkjTkU4mpV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.293684bc8bf53b3da36476d8dd5b6550.exe
Files
-
NEAS.293684bc8bf53b3da36476d8dd5b6550.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ