Static task
static1
Behavioral task
behavioral1
Sample
NEAS.527dbea3f16696ff5f00321247330c00.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.527dbea3f16696ff5f00321247330c00.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.527dbea3f16696ff5f00321247330c00.exe
-
Size
92KB
-
MD5
527dbea3f16696ff5f00321247330c00
-
SHA1
07402de4bc43d5dfb93a65eb37e742ab45e860ee
-
SHA256
7b125f79ad3d4ceab29a6c92cc133d58318eaf51553c427ee92dd11c6500b136
-
SHA512
22ac8a3279caf124949a764ff06bbd7a7073dbc70f8deac652a61cf26c0a52506f6506d6b0af213cd40b0a3ff1553a6b7fe24e7d57a657f97b188b0426c8a04d
-
SSDEEP
1536:Gz1e+Zk78/yXTWSIfmsxV+zXj8M7RrQR51HCHmnKlX16N625h2YuDEm1lSZQcgMo:Gpe+a+yDHIfo8EE5iHmnKlX1M625h1uO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.527dbea3f16696ff5f00321247330c00.exe
Files
-
NEAS.527dbea3f16696ff5f00321247330c00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE