Static task
static1
Behavioral task
behavioral1
Sample
NEAS.035e2591da3e2bd2617a554129407e00.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.035e2591da3e2bd2617a554129407e00.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.035e2591da3e2bd2617a554129407e00.exe
-
Size
207KB
-
MD5
035e2591da3e2bd2617a554129407e00
-
SHA1
56b1776f88153b0995a143b1099ad4ff6c550d4b
-
SHA256
b2d771d065570a54de1cb414ecc16bcab11052fd87b6ada50bafc3fb4f4c9add
-
SHA512
0def47d72e04e334f184739eef2fa0e5bdc7d0e18e784fb4de2bb7efa35a967fc59356b6351a5956a38eba7b217140720f61e056b8ad1f8c3769e60462a16cbd
-
SSDEEP
6144:tf8W9tEVkqfxCMyTGN/hLsZuuaaxexWbuWb0:tfRskqnEGNZAZuuaaMGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.035e2591da3e2bd2617a554129407e00.exe
Files
-
NEAS.035e2591da3e2bd2617a554129407e00.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ