Static task
static1
Behavioral task
behavioral1
Sample
NEAS.14477cf9a78f55c20bbdd2bfcd1b8830.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.14477cf9a78f55c20bbdd2bfcd1b8830.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.14477cf9a78f55c20bbdd2bfcd1b8830.exe
-
Size
4.0MB
-
MD5
14477cf9a78f55c20bbdd2bfcd1b8830
-
SHA1
8e5ea54d2579da078a6836a9962abacbce324f4a
-
SHA256
08a9daa9f0927be345326d6ae18f7c149df684f9c818bda8b09eba92557dc847
-
SHA512
f69348a4f565d3888354095825219348d06d586cafae16c7aecf55e030b4b4e55bfac010b89edae932b440fd02038c51c628bbcbee3f334e8eb2cadd36246874
-
SSDEEP
98304:IIiqp/+yulzhzgss5JR3K0F/TT2xDJLu3BlFQ48:IaV+Nl1UJRfTCx1SL8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.14477cf9a78f55c20bbdd2bfcd1b8830.exe
Files
-
NEAS.14477cf9a78f55c20bbdd2bfcd1b8830.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ