Static task
static1
Behavioral task
behavioral1
Sample
NEAS.76127688345d8b67cb1bf0dc0cc4bf40.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.76127688345d8b67cb1bf0dc0cc4bf40.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.76127688345d8b67cb1bf0dc0cc4bf40.exe
-
Size
339KB
-
MD5
76127688345d8b67cb1bf0dc0cc4bf40
-
SHA1
2352b17c95b96140dd1209a68beec57610bb8b92
-
SHA256
f3fd9f9147b911b7ea1d53363f0b2d7dc215beceeedd8f56737aeeb8baa9c6e4
-
SHA512
7e0ad66409cb4c9c3893d099b8ea2f744ffc65001b9c6c942c0607e8615ba21210ab72c72d9e4da2ead6c799a03bbfd2912189a0579c75e0a4b8a08e09396472
-
SSDEEP
6144:XkdB18x8UZs/BMZ2Dz4pVTZsL/EyaAbEEyogHHiuiDhSvP8m0:A57MZFppZvAQ3HxiD4vPf0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.76127688345d8b67cb1bf0dc0cc4bf40.exe
Files
-
NEAS.76127688345d8b67cb1bf0dc0cc4bf40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 267KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE