Static task
static1
Behavioral task
behavioral1
Sample
NEAS.354dc38a5639cda6bb8cf11262cb7b30.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.354dc38a5639cda6bb8cf11262cb7b30.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.354dc38a5639cda6bb8cf11262cb7b30.exe
-
Size
14KB
-
MD5
354dc38a5639cda6bb8cf11262cb7b30
-
SHA1
f849816dab9391665a434e067586971bdc81b68d
-
SHA256
1112e67cc8299b7f03d7b359475e6405c6ce9dc546f78f87c17d8fa930338a2d
-
SHA512
ddd7041048d40f2276dd1c0389885918282891df9e73d721f6fcff5a9ae9f5a24f7c94235a11dc06430c756bc034b9ec34b9f25c515fd591deaca14fc4ae3142
-
SSDEEP
384:n7xB8XI88888CRRRRRRZB/Zyl+ZWDE045H4dddd:ni4Bhyla8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.354dc38a5639cda6bb8cf11262cb7b30.exe
Files
-
NEAS.354dc38a5639cda6bb8cf11262cb7b30.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ