Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3e8c732b5121b02da451d52be34bd550.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3e8c732b5121b02da451d52be34bd550.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.3e8c732b5121b02da451d52be34bd550.exe
-
Size
132KB
-
MD5
3e8c732b5121b02da451d52be34bd550
-
SHA1
8ebd62311b688d5c9d20b7fecfa5619a624a9412
-
SHA256
107c5ae26e3ca57735c03ec785be9f3d0f0c372b51d874baac3e9318ddc774ca
-
SHA512
dc039bc6e9b5a7ba69b692aba1af74dbe722d50af6dad08b8cb448f63976972513441f23441a571a2e457249257dabc1617e40de1039b44f6945130d0c21e672
-
SSDEEP
1536:wE3qz4ayX9ioT5Xl8lQWj1vTo5G6kvBzodfjZ74Ozv:d79l86WqGzIfjZ7bzv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3e8c732b5121b02da451d52be34bd550.exe
Files
-
NEAS.3e8c732b5121b02da451d52be34bd550.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 42KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE