Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5330d3896ac1f9f6ec200926fa897c70.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.5330d3896ac1f9f6ec200926fa897c70.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5330d3896ac1f9f6ec200926fa897c70.exe
-
Size
1.5MB
-
MD5
5330d3896ac1f9f6ec200926fa897c70
-
SHA1
fdcc9ecd758445475cd8e28c49692ba33e87e8f1
-
SHA256
d170aa91695f1a80df98297867435015d126c2f3c9c0bc082e09fc2d845e69ca
-
SHA512
a5fe4513a38d97d5c2b1d3bd723b1593bb3b48bf93d6efe43bbc2ae24a97da038a5768543a115d2f7336bc6f78a418591d6ecc10abfe2c50e6bc96e59d8ef131
-
SSDEEP
49152:udEAHX+VW/nTMEaUKPF33ozHjZuEIyhOBWRBo:udn3+VeTId933oD2wOQBo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5330d3896ac1f9f6ec200926fa897c70.exe
Files
-
NEAS.5330d3896ac1f9f6ec200926fa897c70.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
HWAxCMck Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DrtWJgcR Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE