Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3b784107f36b5074f50dd9b0b68e7250.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3b784107f36b5074f50dd9b0b68e7250.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.3b784107f36b5074f50dd9b0b68e7250.exe
-
Size
14KB
-
MD5
3b784107f36b5074f50dd9b0b68e7250
-
SHA1
7b3fb7481a6112326a837348bc0670d444749285
-
SHA256
cea77b8b7718bf1ed82ea6df1ce90450b89784de64bc46046af5293dc47e862b
-
SHA512
4d4cd7e8a1a4b48639b49cc94805ad97193cb75b5f9044012398699fd5ec4a046ed214c8a09daa17ca85cc430acd3c64cc3eefcff3de1d7840a0103750c800a2
-
SSDEEP
384:bhyBPu1AI++++++++++ELHhM9kKyrhDE045H:lyPuyI++++++++++Ej9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.3b784107f36b5074f50dd9b0b68e7250.exe
Files
-
NEAS.3b784107f36b5074f50dd9b0b68e7250.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ