Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1345402572886d8e607ccea84f953dd0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.1345402572886d8e607ccea84f953dd0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.1345402572886d8e607ccea84f953dd0.exe
-
Size
328KB
-
MD5
1345402572886d8e607ccea84f953dd0
-
SHA1
0859e7c6972620fe6718b24cfc0d8025302e01f6
-
SHA256
e7ac72dffe330a42cb18fbf7ef65c6f8b2852f0a8221da519f0f1cfebd0e43f1
-
SHA512
09288b7ffbaa63e0dd6f24dca75fda4b3be7904a002a0e085637ac07f97f4418bc2037d0c45cf3e67bb9d456c318879c36ad4bee043affc40b889c231b6aa526
-
SSDEEP
6144:nyWOeLm+tkxoGQvT+W4+HMc+MEGRQ6saHSMf3z0AzbLUG50Tpm+MmvbWdlL0d5aU:nCemx0vN3HKGi6sYjJLUGGtedud5tr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.1345402572886d8e607ccea84f953dd0.exe
Files
-
NEAS.1345402572886d8e607ccea84f953dd0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xgeyx Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hu Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jq Size: 269B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE