Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5318591b055877a00cc6cd8ca9e29ca0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.5318591b055877a00cc6cd8ca9e29ca0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.5318591b055877a00cc6cd8ca9e29ca0.exe
-
Size
30KB
-
MD5
5318591b055877a00cc6cd8ca9e29ca0
-
SHA1
d554a9364579cf1431dfbdf36f81753a432c4418
-
SHA256
34d067e2338ffe732d592847f26bbff76675ae65f83bfa4fc5cf7b38151dd7a9
-
SHA512
8e023866051670265e34d67381b3d89b0656bf1b0a0129f61b9b21ee7392a1d30f87da4c614a969b7c8b67d31f4818b06d2c5691ac4fee36d624dcefc38365b9
-
SSDEEP
768:frT4qlpVkggggggLvggggggggSUwCyYc5NejQK:DTbEXyY+eMK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.5318591b055877a00cc6cd8ca9e29ca0.exe
Files
-
NEAS.5318591b055877a00cc6cd8ca9e29ca0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 386B - Virtual size: 386B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ