Static task
static1
Behavioral task
behavioral1
Sample
NEAS.23812f903c580a898519975730a9d9d0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.23812f903c580a898519975730a9d9d0.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.23812f903c580a898519975730a9d9d0.exe
-
Size
14KB
-
MD5
23812f903c580a898519975730a9d9d0
-
SHA1
037bce2f90d931a6bf3486b48992ea686d943cde
-
SHA256
f741c12aedd8a0aba848ca1b3c9763f8302ff44b6fa9ac4a08e6d8ce4d7ff8a1
-
SHA512
5cc31b9729ec8a2a1d335125ed3865c451d5e4b412758a1c2a783cec19bb9250fa36a683dc407ff637cb86d3a60560daa6d8f633067bc2d9284da2f28bafb360
-
SSDEEP
384:0b12NxG3I7VGB1d2vE1sHXTPu6b8HYHGDE045Hzooo:0csfIvE1gPu6A4HsA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.23812f903c580a898519975730a9d9d0.exe
Files
-
NEAS.23812f903c580a898519975730a9d9d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ