Static task
static1
Behavioral task
behavioral1
Sample
NEAS.890387e23476f613c1bb0d92e9702d50.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.890387e23476f613c1bb0d92e9702d50.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.890387e23476f613c1bb0d92e9702d50.exe
-
Size
328KB
-
MD5
890387e23476f613c1bb0d92e9702d50
-
SHA1
da6196eece68e215378331499d5b77121e216517
-
SHA256
2b934b670ffc8c7925a6211d373cfb3b43e0ac521e59a0b7c746a23a17e3fc26
-
SHA512
91f701efaccee8b71139bd5d7726c2caf3de812650d6abf57d7e2b36ed90f268bd52679229dc252a2727d5f4c82d680d4003f05990cc1793ae056b5e5b193636
-
SSDEEP
6144:8/eHfXUU5EYCTvaBjRjWrLJKuKnGML5Njcx:ayPUusvalgg5Nja
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.890387e23476f613c1bb0d92e9702d50.exe
Files
-
NEAS.890387e23476f613c1bb0d92e9702d50.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 185KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE