Static task
static1
Behavioral task
behavioral1
Sample
NEAS.91e6086dbfa54820f49e984e038f7350.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.91e6086dbfa54820f49e984e038f7350.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.91e6086dbfa54820f49e984e038f7350.exe
-
Size
829KB
-
MD5
91e6086dbfa54820f49e984e038f7350
-
SHA1
fdd4ba492e0eb17c578cf15e6480a901cbc57ace
-
SHA256
bc5dda59bf019a8cca64d7571f8ea603e1872d1f4e4a66cccf908dd5de8295e5
-
SHA512
1fd70ca729b4e4159b9cb92eea1ae092d993d2415bdb3d03e89b25e51f5523052941c2f76ebb891b5c61ecfb12763b867a9d2c7bd8f6705e7a9afc96758f2490
-
SSDEEP
12288:Ab1HU4RJ349F+20FomgQbL9tz8OuKSF5smZQIKRAhI3S7vA7M9:E1pR+oh7z8t56IURJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.91e6086dbfa54820f49e984e038f7350.exe
Files
-
NEAS.91e6086dbfa54820f49e984e038f7350.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 811KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ