Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b3060e288300d736c265ce5843ec4f20.exe
Resource
win7-20231020-en
General
-
Target
NEAS.b3060e288300d736c265ce5843ec4f20.exe
-
Size
564KB
-
MD5
b3060e288300d736c265ce5843ec4f20
-
SHA1
655edab7ddbca4643edc4a334e44c51f39e01e29
-
SHA256
fab1505d0788749cca21d6875eaf508e5ddcf38230ee5c5e042be3e2e590276c
-
SHA512
2265d9ff082d030ddd867234816965fab1b83bda2762b422328d297629f39b5b215f2b5c6b03f0dfdbfa35fe5576ad11400f2aa7a19cbaac6d249d681a00cf7b
-
SSDEEP
12288:MgOLxkWo1XiA+j5uz4Rj/byFVHLAbRotcYT0Iw5p7iN:MPLlbpA4Rj/YNADlTiN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.b3060e288300d736c265ce5843ec4f20.exe
Files
-
NEAS.b3060e288300d736c265ce5843ec4f20.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 395KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 159KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE