Static task
static1
Behavioral task
behavioral1
Sample
NEAS.52c5953580202321901c908b82677b20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.52c5953580202321901c908b82677b20.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.52c5953580202321901c908b82677b20.exe
-
Size
242KB
-
MD5
52c5953580202321901c908b82677b20
-
SHA1
cf2d68ef52fb61ce86a4dc08bf8a0b016621a4e3
-
SHA256
07f5f45648f0dc34ddaf969592a39642925d4ab22bf2c54f416dd63b570167b4
-
SHA512
6d3820f8960cb761a8d473d3531fb35c29d44c88fa0f9c6e92a18f12526a5c2b56145f0351fa23374f593894382213e1b2324c6bf6258008b998da2357986949
-
SSDEEP
3072:nM0eEDbfN3/VOTVtKDs5Nqjszae/0MjCyj0etSOt3ApLTgi7f6uv/yGBZjg0fqtE:Pd9OJtXIs0+MOqr7fp/VjDfqoHC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.52c5953580202321901c908b82677b20.exe
Files
-
NEAS.52c5953580202321901c908b82677b20.exe.exe windows:4 windows x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE