Static task
static1
Behavioral task
behavioral1
Sample
NEAS.675f6e417479104de8898de3166a0540.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.675f6e417479104de8898de3166a0540.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.675f6e417479104de8898de3166a0540.exe
-
Size
2.9MB
-
MD5
675f6e417479104de8898de3166a0540
-
SHA1
824576090c1dcbf0ea6e852891ca015f2356c013
-
SHA256
d15a4f3e3ee5cd5613ac6021d1b8b4ba734a2714922ca74d7e4c6c0a45d3f43e
-
SHA512
5cad1dbea9ad53942b012bba031ae401fffa5e4fc5dc6565c25cfc96bbe99612870134021d4a2f1bb1229103c76855c92453c14941e77f72d398d2e5a468537b
-
SSDEEP
49152:1rMknp/BBP5aAQnp/BBP5aAwrM7rMaQccKTNSZWusrY0d+OC0yy4rM:1rMkKAQKAwrM7rMHccKxrYI9C0yBrM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.675f6e417479104de8898de3166a0540.exe
Files
-
NEAS.675f6e417479104de8898de3166a0540.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ