Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3ff9bc4406ca605ce5e082829e990470.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3ff9bc4406ca605ce5e082829e990470.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3ff9bc4406ca605ce5e082829e990470.exe
-
Size
338KB
-
MD5
3ff9bc4406ca605ce5e082829e990470
-
SHA1
a53803c6ff8b4253f61d14b4790da78f35b2406b
-
SHA256
4b851b8ed345a3a86f588ba028e9bbc880a507cef790277b60d5dfafd81a581e
-
SHA512
2d2e2771a6def0d95659cdcf7fb7b9f7b9664231ccc964f437bf5ddd1cd5c794a1b0bb0985d2a2b11af97f494fe841fb2827bdbc73af0a3a840c9243767ee373
-
SSDEEP
6144:UI7KKLzP/j+GcWbVX63AP/XC34I2G+a+ymbe9lbn4uGyeyqZZmG1ThlhRyZsH:dtP/yGbI3eK3p2GBd914uGye3tNh3RdH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3ff9bc4406ca605ce5e082829e990470.exe
Files
-
NEAS.3ff9bc4406ca605ce5e082829e990470.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE