Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5a3324784cbb60402c658794a9beb3f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5a3324784cbb60402c658794a9beb3f0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5a3324784cbb60402c658794a9beb3f0.exe
-
Size
472KB
-
MD5
5a3324784cbb60402c658794a9beb3f0
-
SHA1
89b9d01a27918147d9a9552b9c390d64e3ce35e8
-
SHA256
46af2fcf90bad7fbabc215e89f5dfe3a6770c31ff5c85553c5f730d05ca1037d
-
SHA512
27e786bcb0777932b8c8489ce07d07bdd91d223fdd945613e52b3f5e63e0aa697c9f3b98ec652e6bdd4c684176e308e8256033abc066a0e5a184d980ae13d9c5
-
SSDEEP
3072:K28RinudiP52xx67lLdxiHDo15RqU7QX2jxDlM2oR0TlyF:UkgiPA6R3PmX2jxqVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5a3324784cbb60402c658794a9beb3f0.exe
Files
-
NEAS.5a3324784cbb60402c658794a9beb3f0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ