Static task
static1
Behavioral task
behavioral1
Sample
NEAS.530f418ca403890cd639aa81f6cc2b20.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.530f418ca403890cd639aa81f6cc2b20.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.530f418ca403890cd639aa81f6cc2b20.exe
-
Size
248KB
-
MD5
530f418ca403890cd639aa81f6cc2b20
-
SHA1
bc5e5de4485f56d795e3dd022a8084fe9955a041
-
SHA256
1a3231b3221a6a08f5e7e775c3cf69e06dbb43293425ec9916d2daf6422d2c27
-
SHA512
23e37a9bb914b9d18db63205f4db67c7bb5a1198d76c55e75cfd7a322d360923259cb61fb332684ec0a2ec3ed2c1d087d7b9fe4a485d679b72096aaeccb92669
-
SSDEEP
768:nrn5n0WZrRQon+2j9S0bYn3cWQ/6QkSG9nl/zQR58p1iKUyerqCP+k:79zPcn3yluRlLAWpvbY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.530f418ca403890cd639aa81f6cc2b20.exe
Files
-
NEAS.530f418ca403890cd639aa81f6cc2b20.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ