Static task
static1
Behavioral task
behavioral1
Sample
NEAS.992b0a3feb990e512e2bbbfeaad23770.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.992b0a3feb990e512e2bbbfeaad23770.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.992b0a3feb990e512e2bbbfeaad23770.exe
-
Size
310KB
-
MD5
992b0a3feb990e512e2bbbfeaad23770
-
SHA1
2a33b270148a701344d6228ba543a9c2329fc758
-
SHA256
9edb0a9644ab8619e6ba24fca3304b0eb21869469c06d83192df8ed8830892ae
-
SHA512
ddf3eb360303a439a49182c500cf9f7488d448c8144985df166e7586687af325a1a8a09f4e7bce55536f5f5e7f9165b8a58c9b6fdb3526832431c2726c3c1d8c
-
SSDEEP
6144:YplsmYOcOWi1KZ6x77PfxakLvlMP+sRIkwcL7Df+/fRROEP:YpyO/sEXgkL9vqx7DOfRRnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.992b0a3feb990e512e2bbbfeaad23770.exe
Files
-
NEAS.992b0a3feb990e512e2bbbfeaad23770.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ove0 Size: - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ove1 Size: 310KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ove2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE