Static task
static1
Behavioral task
behavioral1
Sample
NEAS.48d15515ce38ed8c56ca0cd71c734d20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.48d15515ce38ed8c56ca0cd71c734d20.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.48d15515ce38ed8c56ca0cd71c734d20.exe
-
Size
488KB
-
MD5
48d15515ce38ed8c56ca0cd71c734d20
-
SHA1
13d5440170f4b00ad97c23c70beaeb3092c34931
-
SHA256
bb966253dc78214b21eb52f176452c26d7e829f8fb252317adc3f9c655d05cbe
-
SHA512
29d8b53b0e7bb9a98bb1000457e96c0c8b3637cf180186c7c444890901f728cefa849973152303d7356a229d7b14e3df04e314f881e81f586c4eaf2319fbdf2d
-
SSDEEP
3072:sjyiYHrLOJMatJKOZwOYLOYNOYEOYMOY0OYFOO/OG4OXOOIOOOOOOOYOOOOOO9OX:kUPqJUUPqJ/UPqJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.48d15515ce38ed8c56ca0cd71c734d20.exe
Files
-
NEAS.48d15515ce38ed8c56ca0cd71c734d20.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ