Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3b254d0345612ed8284ebc9861b7bfa0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3b254d0345612ed8284ebc9861b7bfa0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3b254d0345612ed8284ebc9861b7bfa0.exe
-
Size
991KB
-
MD5
3b254d0345612ed8284ebc9861b7bfa0
-
SHA1
5b55a363db9ac2e0625307c76d0b85985e4a0ec1
-
SHA256
bdb06a012f5c1622e150c60c9749a09ec8e79edc722c4763de090a7b128a6d76
-
SHA512
76750757c08342a3132dd60730eed269ee2bf6393e8d235627bef037f49fdccd8520c16f7d2d68ea86f310fd11ef1af288754b4cc21659cbece8a988bace4dc3
-
SSDEEP
24576:zzqxG2Z9mIhQvqLzoPXVMc/ZbsnBu+Si3t14:XMmGo9MIkBSC14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3b254d0345612ed8284ebc9861b7bfa0.exe
Files
-
NEAS.3b254d0345612ed8284ebc9861b7bfa0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ