Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3f3483b52f50a97d169a8f4d0d2911e0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3f3483b52f50a97d169a8f4d0d2911e0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3f3483b52f50a97d169a8f4d0d2911e0.exe
-
Size
4.4MB
-
MD5
3f3483b52f50a97d169a8f4d0d2911e0
-
SHA1
8553276f4e5d18cdc39cde69877cbfbf5dbdd3f0
-
SHA256
3d747ecb4f09c874e6e05949adf1ba1669955df1e4bcbe0f013c1f1044da52e1
-
SHA512
6f5f891f5b3b2cabfb52d691b62bfd71b7cc495a1fe479073aabe9a7536e92e8b7c6c9f692e56fdebff37bd467d2aec25ce9a8ad341ecf67da5d2ce18ffabc48
-
SSDEEP
98304:Th8xMxTOfTRQXEEMUKRTOhBwm0zgCdItunPB+lPVZusnPhLM23FGQNhdewv6qpoD:Th4MxTOfTRQ0EfKRTOhBwm0zg/tunPBn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3f3483b52f50a97d169a8f4d0d2911e0.exe
Files
-
NEAS.3f3483b52f50a97d169a8f4d0d2911e0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 74KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE