Static task
static1
Behavioral task
behavioral1
Sample
NEAS.004486d212418be7c6c76fc6ad030510.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.004486d212418be7c6c76fc6ad030510.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.004486d212418be7c6c76fc6ad030510.exe
-
Size
246KB
-
MD5
004486d212418be7c6c76fc6ad030510
-
SHA1
54a53d6f97838c9ba53a1aa2d021df77abf14494
-
SHA256
38a7d7367fa2a963d85db4666da98a45d223fbd129022e045ba4be728a8513ba
-
SHA512
3f3cc0d18bcea58539ef518603f432c05cf8811f744a4c611a25e81eaa0e6add531da2672794bdf4fd5303a89ce64489b566cceb0068c2125f50d753408c177d
-
SSDEEP
6144:ra7ZFRCiEjBAIrkN8NqwnliXtDGF4Olmt:m5CiEKNl+iXRzxt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.004486d212418be7c6c76fc6ad030510.exe
Files
-
NEAS.004486d212418be7c6c76fc6ad030510.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE