Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3c876ba6c035fadf1cf5b7adae5c46a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.3c876ba6c035fadf1cf5b7adae5c46a0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.3c876ba6c035fadf1cf5b7adae5c46a0.exe
-
Size
544KB
-
MD5
3c876ba6c035fadf1cf5b7adae5c46a0
-
SHA1
485865b5f1de5db57b47c6c957e169c2e0e0bc79
-
SHA256
363f0490cc7355635957b9958cdab5dc76a2011655859f96476a64651338e64a
-
SHA512
ab9dea6d4ac99a5452d96b1cfcc62b55917a4fc888310cdcbf6dd37f18e905f5e6c1adb9002465b8124a311146283d7452a0674a45aabfe6d7404c01b3b8f1d0
-
SSDEEP
3072:jL4aCE8zUB8ls507hX4f4+BsMDhLQUCxIuQAlPV/9HZgd5NDIKEQm:4aCnK0s0X4w+m4hLQCAlPVeDIpQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3c876ba6c035fadf1cf5b7adae5c46a0.exe
Files
-
NEAS.3c876ba6c035fadf1cf5b7adae5c46a0.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 81KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE