Static task
static1
Behavioral task
behavioral1
Sample
NEAS.42d9e49eecc39d19db248c61a7a92d50.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.42d9e49eecc39d19db248c61a7a92d50.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.42d9e49eecc39d19db248c61a7a92d50.exe
-
Size
404KB
-
MD5
42d9e49eecc39d19db248c61a7a92d50
-
SHA1
2e53de45129f43bed72207793d38adf51585f109
-
SHA256
a57c5667cb77f6b141ca250bde89e103e688fde15b022aa9c12141433afda6c6
-
SHA512
f2ba57bfdb5e45ae1a79a34c3923216b8e988f3a76e023ee65c54d1eead98acfdb73fdb69aba871700816f921f9bb872c6cd3cd9d040c423c377a52405eb4dc8
-
SSDEEP
3072:/hqv8zjlHMO/jNbyEMfgZ9nLqsKMt9oseV2gXbrIQqmPOyA:5qEzrMlIZlLvKyyV2gLSR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.42d9e49eecc39d19db248c61a7a92d50.exe
Files
-
NEAS.42d9e49eecc39d19db248c61a7a92d50.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Sections
AUTO Size: 7KB - Virtual size: 7KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 185KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.znxezvw Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Skd Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.xaqfjj Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ