Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3af617b142433a078f564147ca150f40.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3af617b142433a078f564147ca150f40.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3af617b142433a078f564147ca150f40.exe
-
Size
58KB
-
MD5
3af617b142433a078f564147ca150f40
-
SHA1
473c0d000e7abed22a7fa525caeb89ab69e45b1b
-
SHA256
d34145cdcf59fc2f90cd8b2b9c340f085620813b194e775026f3a80553f058da
-
SHA512
e245009a504b2d3e7a7f787205c477db9b1f1c2bb7e40027e4c9749a3a6b35a3d492371250f54e758af9e8491d7858993e011bb4f0b39bf62e51e86d3b1aa323
-
SSDEEP
1536:JdXkE87nccOtwqsIcGIjAPdrl86QpCXofT:rUE87cxtplAKri6WCXofT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3af617b142433a078f564147ca150f40.exe
Files
-
NEAS.3af617b142433a078f564147ca150f40.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 33KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 385B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ